Today just two weeks ago we publish an article echoing a "study", put it in quotation marks, which claimed that Windows 10 it was more secure than Linux. Let's not get into the debate about what Linux is, because all the media know that it is a kernel, in fact it was mentioned in the "study", but we usually refer to it also as an operating system. All that is irrelevant, and more so when Microsoft yesterday made public two vulnerabilities that affect the latest versions of its operating system.
First of all, the company that Satya Nadella runs It has been recognized who are aware that there are attacks to computers using Windows, taking advantage of uncorrected vulnerabilities in the Adobe Type Manager Library: «There are two remote code execution vulnerabilities in Microsoft Windows when the Windows Adobe Type Manager library incorrectly handles a specially crafted multi-master font: Adobe Type 1 PostScript format«.
Windows 10 is more secure than Linux, they said ...
And here we have to talk once more about the "insecurity" of Linux and the "security" of Windows: the "specialists" who carried out the study that we published two weeks ago spoke of the number of vulnerabilities, not their severity or time of existence Not to mention that they had only valued the last 10 years of Windows and the last 20 years of Linux. And it is that the Linux community solves its problems in days, sometimes in hours, while Microsoft tells us that it is already working on fixing a failure that are already exploding and we have to be calm because "Windows 10 is safe."
As for the vulnerability, it is a "zero-day", which means that it has just been discovered and has no patch available yet, and affects Windows 7 onwards, which includes the Server versions. If a user opens a specially crafted file, remote code could be executed. Windows 10 users will receive the patch on some Tuesday, hopefully today, but those of Windows 7 might never receive it.
Windows users who want make sure you don't have this attack they should turn off the Explorer preview and details pane, do the same for the WebClient service, and rename the file atmfd.dll. They are supposed to be calm that way ... or not ... but Windows 10 is more secure than Linux (note the irony).