![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/09\/Bashware.jpg\")
If you haven\u2019t heard the term \u201cBashware,\u201d you\u2019re not alone, but in the weeks and months ahead, you can bet you\u2019ll be hearing more about it.<\/p>\nIf you haven\u2019t heard the term \u201cBashware,\u201d you\u2019re not alone, but in the weeks and months ahead, you can bet you\u2019ll be hearing more about it.<\/p>\n
The reason?<\/p>\n
Recently, Microsoft rolled out a new feature for Windows 10 users called WSL, which is a Windows Subsystem for Linux. It makes use of the popular \u201cBash\u201d terminal, which allows Windows users to run apps native to the Linux world, which is very handy in some situations.<\/p>\n
Unfortunately, there\u2019s a problem. The security firm Check Point uncovered a hacking technique it dubbed \u201cBashware.\u201d It allows a hacker to circumvent any and all Windows-based security measures you may have in place, because Windows 10 does not currently monitor the processes of Linux executables.<\/p>\n
In terms of scope and scale, that means that all 400 million plus machines currently running Windows 10 are vulnerable, which probably means that every machine in your company\u2019s network is vulnerable.<\/p>\n
A spokesman for Check Point had this to say about their recent discovery:<\/p>\n
\u201cBashware is so alarming because it shows how easy it is to take advantage of the WSL mechanism to allow any malware to bypass security products. We tested this technique on most of the leading anti-virus and security products on the market, successfully bypassing them all.\u201d<\/p>\n
Microsoft is not taking the news lying down. They have already taken steps to minimize the impact of this flaw, but therein lies the other problem.<\/p>\n
A lot of the potential exploits of the WSL subsystem could be launched from third-party apps that reside outside Microsoft\u2019s control. The tech giant is currently working with these companies to shore up security and minimize risk, but it remains to be seen how receptive third-party developers will be to securing the products they\u2019re selling.<\/p>\n
In any case, Microsoft seems reluctant to pull the plug on their new feature, which means there\u2019s a new threat on the horizon.<\/p>\n","protected":false},"excerpt":{"rendered":"
If you haven\u2019t heard the term \u201cBashware,\u201d you\u2019re not alone, but in the weeks and months ahead, you can bet you\u2019ll be hearing more about it. The reason? Recently, Microsoft rolled out a new feature for Windows 10 users called WSL, which is a Windows Subsystem for Linux. It makes use of the popular \u201cBash\u201d […]<\/p>\n","protected":false},"author":5,"featured_media":30075,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[30],"yoast_head":"\n