Independent researcher Laurent Gaffie earlier this week took credit for discovering, and publicly disclosing, a new flaw that affects Windows Vista and Server 2008.  Gaffie's action was criticized by Microsoft spokesman Christopher Budd. "This vulnerability was not responsibly disclosed to Microsoft and may put computer users at risk," says Budd.  Gaffie claimed the flaw would allow a hacker to cause the system to crash, displaying the dreaded Blue Screen of Death (BSoD).  So what is Microsoft going to do about it?

 
"The only information we can currently share with regard to timing is that Microsoft is currently working to develop a security update to address this vulnerability and will release the security update once it has reached an appropriate level of quality for broad distribution,"
 
Microsoft spokesman Christopher Budd, quoted above, also emphasizes that no hacker has accomplished a successful exploit yet.  As we all know, that kinda sounds like a challenge to the hacker community.  I guess we'll just have to keep our eyes peeled for this potentially Conflickr-like Internet worm and hope Microsoft saves us when they release security patches as early as October 13th.
 
Original Article:
http://blogs.usatoday.com/technologylive/2009/09/security-experts-warn-of-possible-worm-hitting-vista.html