Microsoft warns of security risk from Vista, Windows 7 sidebars

Users of Microsoft's Windows Vista and 7 may have to disable their sidebars – the space reserved for onscreen gadgets – due to possible vulnerabilities. Security vendor Sophos cited a security advisory by Microsoft's security team that vulnerabilities may let unsecured gadgets run malicious code on the Sidebar. In a blog post, Sophos noted the warning comes ahead of a talk for Black Hat by Mickey Shkatov and Toby Kohlenberg titled "We have you by the gadgets." That talk supposedly threatens to expose attack vectors against gadgets, how malicious gadgets can be created, and the flaws they have found in published gadgets, Sophos said. "If the researchers have managed to find ways to exploit existing gadgets that's particularly worrying," it said. For now, it said Microsoft has issued a "Fix It Tool" to protect Windows 7 and Vista users by fully disabling the Windows Sidebar and Gadgets. Interestingly, Sophos noted Microsoft has dropped Gadgets from the upcoming Windows 8. "Sorry if it causes you any pain, but I would recommend you follow Microsoft's advice if you run Windows 7 or Vista and apply their 'Fix It tool' as soon as possible. It may be a sledgehammer to crack a nut - but it's a nut that needs smashing, and fast," it said. — LBG, GMA News