At least 10 hacking groups using Microsoft software flaw: researchers

is anyone surprised that more flaws have been found in Microsoft Software ?

Linux--free, stable, completely reliable.

I suspect most institutions using Windows in Japan will update and install the necessary security patches in 5 to 10 years.

dagonToday 05:30 pm JST

I suspect most institutions using Windows in Japan will update and install the necessary security patches in 5 to 10 years.

I wish you could see the so called "IT" of some institutions in Japan... It is a nightmare...

MMMMMMMM.

Yes, of course, I get your point. But the problem is not Microsoft or their software leaks always being bad and other platforms, open source etc. always super heroic...lol The real problem are all those crazy black hacker groups and nobody else. They should be use their negative capabilities and turn into something good and civilized. They have a great knowledge, admitted, but why do they use it for such stupid and illegal breaches? They can do some research help for new medications, vaccines, ecological issues, alternative energy and a lot more instead. What have you all done to those kids that they are wrongly educated and developed into bad hackers? That’s the question here.

They have a great knowledge, admitted, but why do they use it for such stupid and illegal breaches?

Three reasons:

Financial benefit - the right hack can make a hacker millions of dollars

Anarchist tendencies - some black hat hackers just want to take down the system

Political ideologies - they feel they are doing good work to further their political ideology

They can do some research help for new medications, vaccines, ecological issues, alternative energy and a lot more instead.

That would be the ideal. How do you suggest we get them to stop hacking and turn their efforts in that direction?

Political ideologies - they feel they are doing good work to further their political ideology

It is beyond simply ideology. There are governments that as a matter of routine policy employ hackers as government employees to gain access to technologies and often business/financial information they otherwise would have no access to. It isn't always about stealing the latest technologies either though that seems to be the bulk of what is going on. Some Chinese government sponsored hacks of western firms were not after their intellectual property but rather wanted insight into their financial condition and business strategies in order to undercut them in business.

There are governments that as a matter of routine policy employ hackers as government employees to gain access to technologies and often business/financial information they otherwise would have no access to.

Of course - with the objective of gaining power, to further their political ideology.

Some Chinese government sponsored hacks of western firms were not after their intellectual property but rather wanted insight into their financial condition and business strategies in order to undercut them in business.

The motive being financial benefit, funding the furthering of their political ideology.

The only way to get these hackers off of this is to somehow find a motivation that proves stronger than the current financial and ideological motivations.

The Microsoft vulnerability is clearly very Public, though there are many others that are not, and which are currently being exploited across both Windows, Linux and other Platforms, and which do not receive the same attention, but are never-the-less rather serious.

And using Open-Source Software is not a Shield to hide behind over the "peer" reviewed security issues...

Finally Corporations themselves should shoulder some blame for having people in charge of IT Security issues, who do not really understand the nuts and bolts of Security.

Anyone wishing to think about Cyber Security ?

Here's a useful list of pointers, to help you make your own decision:

https://hackr.io/blog/best-cybersecurity-certification

It's early days within this field, and in the case of Penetration testers - you do have your Cowboy outfits still making big bucks off unsuspecting companies.

At present, there's no one common central organization ratifying these though, as the following shows:

https://en.wikipedia.org/wiki/List_of_computer_security_certifications

Things may change eventually.

There are governments that as a matter of routine policy employ hackers as government employees to gain access to technologies and often business/financial information they otherwise would have no access to.

Of course - with the objective of gaining power, to further their political ideology.

Open your eyes. It is more than simply ideology. It is for the hacking nation how they catch up with their competitors and adversaries. It is in fact completely outside of the particular governing ideology. There is nothing in Communist ideology that says anything about stealing technology from more advanced nations. It is just for them easier to steal than to do the hard work to develop their own technology in house.