US-based technology giant Microsoft announced that it detected 2 zero-day vulnerabilities in the open source libraries named “webp” and “libvpx” and closed these vulnerabilities. According to the statement, the vulnerabilities affected consumers using the company’s most popular services such as Skype, Teams and Edge. Microsoft said that zero-day vulnerabilities are also known to hackers and that some users may have been subjected to cyber attacks due to these vulnerabilities.
According to cyber security experts working at Google and Citizen Lab, two zero-day vulnerabilities detected in September were used for individuals through spyware. Meanwhile; Let’s say that security vulnerabilities affect not only Microsoft but also all other technology companies. Because webp and libvpx are the libraries that we all use and come across, even if we are not even aware of it. The simplest example; If you download images to your computer, phone or tablet via the Google search engine, the download extension will most likely be webp.
It is unknown how many people are affected
Not just Microsoft; It is not known how many users have been affected by the security vulnerabilities, which also affect companies such as Apple, Google and Firefox. However, it is likely that many more users are affected by these vulnerabilities than expected. In a study conducted by Citizen Lab last month, it was revealed that if the spyware created for this vulnerability infects the iPhone, the phone can be directly hacked.
Microsoft published a brief statement on the subject on its official website. There are no details in this statement other than what we have given you. Meanwhile; For a more detailed explanation, we should also point out that there are technology news sites that reach Microsoft, but Microsoft does not provide details.