Microsoft's monthly security updates don't touch Windows 7; give hackers time, researcher says

By JESSICA MINTZ , Associated Press

Last update: November 10, 2009 - 5:12 PM

SEATTLE - Microsoft's newest computer operating system has survived its first few weeks on the market without needing any security fixes.

Microsoft Corp. plugged several security holes Tuesday, but none are aimed at Windows 7, which was released Oct. 22.

That's to be expected, said Ben Greenbaum, a researcher at the antivirus software company Symantec Corp. "Attackers will take more time to figure out ways of breaking into Windows 7," he said.

Computer users can get the patches through Microsoft's automatic-update service, or by visiting microsoft.com/security.

One of the fixes Microsoft marked "critical," its highest severity rating, would thwart an attacker from infecting all the PCs on a local network after gaining access to just one. In other words, even if most people in the office are good at avoiding clicking on unknown links or opening mysterious documents, if one person's computer is compromised the attacker could take over the rest.

The software maker also fixed flaws in its Excel and Word software that would give an attacker control of a PC if its owner opened a tainted spreadsheet or document.

It also patched problems in several older versions of Windows, including XP and Vista, that would give an attacker who already has control of a computer access to more of its functions.

Recent Science + Technology stories

Facebook, Wikipedia execs to brief Vatican, Catholic bishops about Internet, youth culture - November 10, 2009

Facebook, Wikipedia execs to brief Vatican, Catholic bishops about Internet, youth culture - Vatican officials and Catholic bishops are getting a lesson on the Internet from Facebook, Wikipedia and Google executives as the church struggles to get its message out in the digital age. More

Comment on this story | Be the first to comment | Hide reader comments

Blog: Patent Pending

Lights out at U energy conference. Irony police notified.

Just as Lawrence Kazmerski, a top official at the National Renewable Energy Laboratory, was about to give the keynote address at the University of Minnesota's annual E3 conference at the RiverCentre in St. Paul, the lights went out, bathing the audience in darkness and a deep sense of irony.