Security time bomb is triggered by 'rogue laptops'
Most enterprises have a significant number of desktop PCs that are vulnerable to an attack from the numerous worms and viruses that already exist on the open Internet; but these machines are protected, temporarily, by the corporate firewall.
The LSASS vulnerability, which Microsoft patched in April, is still causing a nuisance because there are so many unpatched computers connected to the Internet. Many of these machines are behind a corporate firewall and have so far escaped infection, but security experts say they represent a security time bomb that could be set off by an infected laptop connecting to the internal network.
By Munir Kotadia at ZDNet.
[ Read more ]