NSA warns Microsoft Windows users against cyberattacks

The US National Security Agency (NSA) has warned Microsoft Windows users to make sure they are using updated systems to protect themselves from cyber attacks.

US officials and Microsoft executives say older versions of programs may be vulnerable to malware.

In this notice, NSA officials said that a flaw known as "BlueKeep" existed in previous editions of Microsoft Windows.

Last week, Microsoft warned that "some older versions of Windows" may be vulnerable to cyber attacks.

"All customers of the affected operating systems [Windows 7 and earlier] should update as soon as possible, "said Microsoft.

US officials said the "BlueKeep" flaw could make computers vulnerable to virus infection through automated attacks or downloading malicious attachments.

They said that ransomware can often be installed quickly, holding files hostage and demanding payment from individuals.

The vulnerability of older versions of Microsoft Windows, writes Nicholas Weaver of the International Computer Science Institute, means that bad actors can "take full control of the remote system".

Updating systems, as explained by Microsoft executives, helps protect computer users against this type of cyber attacks.

A ransomware attack on the city of Baltimore recently disrupted municipal services, putting municipal employees out of action and making it more difficult to pay for their circulation tickets and water bills.

The New York Times reported that the NSA was aware of the system flaw, EternalBlue, but kept it secret for years.

EternalBlue has been involved in a series of cyber attacks over the past three years, including the WannaCry assault that disrupted the UK NHS.

NSA Senior Advisor Rob Joyce tweeted on its own account that some computer users might face a "significant risk" because of the vulnerabilities of older versions of Microsoft Windows, but that they would be protected by updates.

The NSA issues regular notices to private companies and computer administrators.

But their warning about BlueKeep, as well as the social media release of Mr. Joyce and the NSA's attention to the social media, showed "the likely severity of the vulnerability," said Christopher Porter of the Atlantic Council.

Microsoft officials pointed out that there is no danger sign of a new cyber attack and that update systems would protect computer users from any threat.

The company's leaders also reminded customers that it was essential to keep "internal systems updated with the latest patches" to protect people and computers from malware.

Defend their reputation

By Tara McKelvey, BBC News

Analysts and directors of the NSA have been in the spotlight recently because of the ransomware attack in Baltimore, and Rob Joyce's tweet was part of their efforts to show that they were working hard to protect the states United States of future cyberattacks.

He and the NSA officials are trying to be more aggressive in their efforts to inform the public and in this way they are trying to reduce criticism of them.

More generally, NSA officials have been criticized for not sharing important information about their activities with the public, and Joyce is trying to change this image by communicating directly with Microsoft users about social media – by explaining to them the dangers they represent. face.