The capability to run Linux in some versions of the latest Windows 10 update has flaws, which has resulted in a new attack surface.<\/p>\n
According to a report by eWeek<\/strong><\/a>, most of the issues were reported to Microsoft and have been fixed – but in certain cases the “Linux environment running in Windows is less secure because of compatibility issues”.<\/p>\n “There are a number of ways that Windows applications could inject code, modify memory, and add new threats to a Linux application running on Windows,” stated\u00a0Alex Ionescu, chief architect at Crowdstrike.<\/p>\n The modified Linux code could then call Windows APIs and get access to system calls to perform malicious actions, stated the report.<\/p>\n “Linux on Windows is not running inside of a Hyper-V hypervisor. Linux is running on the raw hardware, getting all the benefits of performance and system access, as well as expanding the potential attack surface,” said\u00a0Ionescu.<\/p>\n Two big Windows 10 updates coming in 2017<\/a><\/strong><\/p>\nMore on Windows<\/h3>\n