REDMOND, Wash. — April 25, 2012 — Microsoft Corp. today released the Microsoft Security Intelligence Report volume 12 (.pdf file), which found that the Conficker worm was detected approximately 220 million times worldwide in the past two and a half years, making it one of the biggest ongoing threats to enterprises. The study also revealed the worm continues to spread because of weak or stolen passwords and vulnerabilities for which a security update exists.

According to the SIRv12, quarterly detections of the Conficker worm have increased by more than 225 percent since the beginning of 2009. In the fourth quarter of 2011 alone, Conficker was detected on 1.7 million systems worldwide. In examining the reasons behind Conficker’s prevalence in organizations, research showed that 92 percent of Conficker infections were a result of weak or stolen passwords, and 8 percent of infections exploited vulnerabilities for which a security update exists.

“Conficker is one of the biggest security problems we face, yet it is well within our power to defend against,” said Tim Rains, director of Microsoft Trustworthy Computing. “It is critically important that organizations focus on the security fundamentals to help protect against the most common threats.”

The SIRv12 also revealed that many of the threats often referred to as Advanced Persistent Threats (APTs) are no more advanced or sophisticated than other types of attacks. In most cases, these attacks leverage known vectors such as exploiting weak or stolen passwords and vulnerabilities for which security updates exist, but their success lies in the persistence and determination in trying different tactics to compromise the target. This is why Microsoft refers to these types of threats as Targeted Attacks performed by Determined Adversaries, rather than APTs.

“Labeling cyberthreats as ‘advanced’ is often times misleading and can divert organizations’ attention away from addressing basic security issues, which can prevent more common threats from infiltrating their systems,” Rains said. “Most attacks do not possess new, super-advanced techniques or technology as the APT label implies; in the majority of cases, they simply exploit weak or stolen passwords or vulnerabilities for which a security update exists and employ social engineering.”

Microsoft recommends that customers and businesses adhere to the following security fundamentals to help ensure they are protected:

• Use strong passwords and educate employees on their importance

• Keep systems up to date by regularly applying available updates for all products

• Use antivirus software from a trusted source

• Invest in newer products with a higher quality of software protection

• Consider the cloud as a business resource

“With organizations being presented with significant amounts of data and media reports on cyberthreats, the Microsoft Security Intelligence Report volume 12 gives us good perspective on recent trends in the global threat landscape,” said Bob Rodger, global head of IT Infrastructure Security at HSBC. “The report, in combination with other sources of intelligence, assists us to more accurately and effectively invest, prioritize and make informed decisions about our security infrastructure to ensure that our business continues to be optimally protected from threats.”

For businesses, as Scott Charney, corporate vice president of Microsoft Trustworthy Computing, outlined in his keynote presentation at RSA 2012, Microsoft recommends a more holistic approach to risk management to help protect against both broad-based and targeted attacks, including the following:

• Prevention. Employ security fundamentals and pay close attention to configuration management and timely security update deployment.

• Detection. Carefully monitor and perform advanced analysis to identify threats. Keep abreast of security events and leverage credible sources of security intelligence.

• Containment. If the targeted organization has configured its environment with targeted attacks by determined adversaries in mind, it is possible to contain the attacker’s activities and thereby buy time to detect, respond to and mitigate the attack. To contain an attack, consideration should be given to architecting domain administration models that limit the availability of administrator credentials and apply available technologies, such as IPsec-based network encryption, to restrict unnecessary interconnectivity on the network.

• Recovery. It is important to have a well-conceived recovery plan, supported by suitably skilled incident response capability. Maintain a “crisis committee” to set response priorities and engage in exercises to test the organization’s ability to recover from different attack scenarios.

Microsoft produces the SIR twice per year to keep the industry informed on the changing threat landscape and provide actionable guidance for customers in an effort to create safer more trusted computing experiences for everyone. The latest report, volume 12, provides insight into online threat data with new information for July 2011 through December 2011 and analysis of data from more than 100 countries and regions around the world. More information about SIRv12 is available at http://www.microsoft.com/sir.

Founded in 1975, Microsoft (Nasdaq “MSFT”) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Note to editors: For more information, news and perspectives from Microsoft, please visit the Microsoft News Center at http://www.microsoft.com/news. Web links, telephone numbers and titles were correct at time of publication, but may have changed. For additional assistance, journalists and analysts may contact Microsoft’s Rapid Response Team or other appropriate contacts listed at http://www.microsoft.com/news/contactpr.mspx.

REDMOND, Wash. — April 25, 2012 — Microsoft Corp. and Pegatron Corp. have signed a patent agreement that provides coverage under Microsoft’s patent portfolio for a broad array of Pegatron products including eReaders, smartphones and tablets running the Android or Chrome platforms. Although the contents of the agreement have not been disclosed, the parties indicate that Microsoft will receive royalties from Pegatron under the agreement.

“We are pleased to have reached this agreement with Pegatron and proud of the continued success of our Android licensing program in resolving IP issues surrounding Android and Chrome devices in the marketplace,” said Horacio Gutierrez, corporate vice president and deputy general counsel, Intellectual Property Group at Microsoft. “With this agreement, Microsoft has now licensed four of the top five Taiwanese ODMs.”

Microsoft’s Commitment to Licensing Intellectual Property

The patent agreement is another example of the important role intellectual property plays in ensuring a healthy and vibrant IT ecosystem. Since Microsoft launched its IP licensing program in December 2003, the company has entered into more than 1,100 licensing agreements and continues to develop programs that make it possible for customers, partners and competitors to access its IP portfolio. The program was developed to open access to Microsoft’s significant R&D investments and its growing, broad patent and IP portfolio.

More information about Microsoft’s licensing programs is available at http://www.microsoft.com/iplicensing.

Founded in 1975, Microsoft (Nasdaq “MSFT”) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Note to editors: For more information, news and perspectives from Microsoft, please visit the Microsoft News Center at http://www.microsoft.com/news. Web links, telephone numbers and titles were correct at time of publication, but may have changed. For additional assistance, journalists and analysts may contact Microsoft’s Rapid Response Team or other appropriate contacts listed at http://www.microsoft.com/news/contactpr.mspx.