Today, Microsoft has issued a critical patch to every supported version of Windows that resolves a bug that may have been open for as long as fifteen years could allow attackers to remotely take control of Windows devices that connect to an Active Directory domain. The flaw_— named ‘Jasbug’ — could allow someone to hijack a machine in a fairly straightforward manner. Microsoft said on its blog today it could be executed as follows: This is an example of a ‘coffee shop’ attack scenario, where an attacker would attempt to make changes to a shared network switch in a public…

This story continues at The Next Web


-->