Microsoft patches Age of Empires II bug used for remote code execution

Microsoft patches Age of Empires II bug used for remote code execution">

On Tuesday, Microsoft patched a record number of security bugs across its product lines, largely due to the use of AI in helping the company and external researchers discover vulnerabilities. Among the fixed flaws was one for the remastered version of the classic 25-year-old war strategy video game Age of Empires II. The vulnerability allowed hackers to take over a victim's computer by sending a custom malicious game invite, according to security researchers.

A video posted on X demonstrates how the flaw could be exploited by hackers. According to cybersecurity firm Rapid7, a successful attack would have enabled hackers to place malicious files on the victim's computer, potentially allowing them to run malicious code on the victim's machine. This effectively gave the hacker control over the compromised computer.

There is no evidence that this bug was successfully exploited in the wild by hackers. Targeting video gamers can be an effective way to install malware on a large number of victims' computers and steal their passwords, for example. Why this matters: This patch is a significant reminder of the importance of securing even seemingly innocuous software, like video games.

The use of AI in discovering bugs has clearly paid off for Microsoft, allowing the company to fix a potentially devastating vulnerability. For developers, this highlights the need for robust security testing, including the use of AI-powered tools. For consumers, it underscores the importance of keeping software up to date, especially for popular applications like video games.

As the use of AI in cybersecurity continues to grow, it will be interesting to see how companies like Microsoft balance the benefits of AI-powered security with the potential risks of relying on these tools.