KISA "Windows 10 Security Update Required... Risk of Malware Infection"

[Asia Economy Reporter Buaeri] The Korea Internet & Security Agency (KISA) announced on the 13th that "a vulnerability has been discovered that allows malware to be installed through the file sharing feature (SMB) of Microsoft (MS) Windows products," urging users to strengthen security.

The affected products are Windows 10 (versions 1903, 1909) and Server (versions 1903, 1909). This vulnerability can spread malware to vulnerable PCs in a manner similar to the WannaCry ransomware that caused significant global damage in 2017. If security updates are not applied, users may suffer serious harm.

Users of the affected Windows products should perform security updates via the MS website or the Windows Update feature.

Considering the risk and impact of this vulnerability, MS provided temporary mitigation measures before the patch was released and announced an emergency update after developing the patch. Detailed information can be found through the KISA BohoNara security notice.

Shin Daegyu, Head of KISA's Cyber Incident Response Center, stated, "If the SMB vulnerability patch is not applied, malware infection exploiting the vulnerability and its spread to other systems can occur, so we urge users to actively update their security." He added, "KISA will do its best to prevent cyber incidents caused by this by promptly disseminating information and strengthening monitoring."