Shocking: security vulnerabilities in software updates

Two Israeli security company radware experts recently discovered that software updates may be hijacked and communications may be affected by this vulnerability, including Skype and several other applications.Program. Itzik Kotler, head of the radware security operations center, warned that more than 100 mainstream software had the above security problems. To verify this discovery, Kotler and his colleague Tomer bitton are developing a tool called ippon that can perform the above attacks and provide a 3D Graph of machines potentially affected on the network. In judo, ippon means failure. Similarly, ippon will make your computer game over. According to their theory, the attacker first scanned the wireless network to find a computer that checked for updates through HTTP. When the system detected that a computer sent a software update request, this tool will reply to this computer before the application update server responds, and ippon will reply to available updates-even if all updates have been installed on this computer, then the malicious program will be downloaded to the local computer by the user. So far, they have not found this flaw in Firefox and other mainstream browsers. They also found that Microsoft's software is currently secure because it uses digital signatures during the update process. Kotler believes that all software updates should use digital signatures. People should avoid software updates through the wireless public network.