Microsoft researchers were working late into the hours the Friday before this holiday weekend looking to address yesterdays Shadow Brokers dump of Windows exploits. In a message sent to TechCrunch overnight, the company said it has addressed the issue for systems running Windows 7 and later.
Weve investigated and confirmed that the exploits disclosed by the Shadow Brokers have already been addressed by previous updates to our supported products, the company wrote. Customers with up-to-date software are already protected.
Microsoft also issued a blog post on the subject, noting that, as the company worked to verify the exploits, it discovered that nine were already been addressed by previously issued patches. Microsoft Security Response Center, naturally, recommends that users keep their machines up to date to ensure that theyre protected.
There are three additional exploits not addressed by the aforementioned patches, though MS notes that theyre not capable of reproducing on machines running Windows 7 and above or recent versions of Exchange. Of course, that leave potential vulnerability for users still clinging to older versions of the operating system, as theyre no longer supported.
Once again, Microsofts response would no doubt be: upgrade to ensure youre protected.
The dump was the secondfrom Shadow Brokers this week, but the first that contained major exploits in several months. The exploits were believe to have originated from the National Security Agency as part of its work to monitor money flow in the SWIFT interbank messaging system. The NSA has been roundly criticized for not warning companies sooner that the tools had leaked, though it has yet to address any potential connection to the leak.
And indeed, in a separate statement Microsoft confirmed the Agency hadnt revealed potential vulnerabilities prior to yesterdays mad dash to address the leaked exploits. At this time, said the spokesperson, other than reporters, no individual or organization has contacted us in relation to the materials released by Shadow Brokers.