Published on

Trending Threat (3/3): 10-year-old Windows bug behind supply chain attack on softphone platform 3CX

In order to opt-in, you need to apply some sort of registry fix. Thus, it’s important to note that anytime you upgrade or patch Windows, chances are that registry fix gets reverted. This essentially ensures that this well-intended fix never actually gets applied in practice, which is precisely what happened here.

Microsoft is proposing that users employ Windows Defender or some other Endpoint Detection and Response (EDR) solution to protect themselves. However, the reality is that there are already built-in operating system-level mechanisms to fix and address the issue. We are hoping that Microsoft steps up and does the right thing by rolling out a proper fix this time, but it's uncertain what will actually transpire. We’ll have to wait and see what happens.

Keywords

  • Opt-in
  • Registry Fix
  • Windows Upgrade
  • Windows Patch
  • EDR (Endpoint Detection and Response)
  • Windows Defender
  • Operating System Mechanisms
  • Microsoft
  • Proper Fix
  • Supply Chain Attack
  • Softphone Platform 3CX

FAQ

Q1: Why does the registry fix for the bug get reverted? A1: Every time you upgrade or patch Windows, the applied registry fix often gets undone, ensuring the fix never actually takes effect in practice.

Q2: What is Microsoft's proposed solution for the issue? A2: Microsoft suggests using Endpoint Detection and Response (EDR) tools such as Windows Defender for protection.

Q3: Are there built-in solutions within the operating system to address this problem? A3: Yes, there are built-in operating system-level mechanisms that can fix and address the issue.

Q4: What is the present concern regarding Microsoft’s actions? A4: The concern is whether Microsoft will implement a proper fix this time around; it's uncertain what will happen next.

Q5: What platform is specifically affected by this bug in the context of the article? A5: The softphone platform 3CX has been affected by this supply chain attack due to the 10-year-old Windows bug.

Read More