--- title: "Critical Crypto Flaw in Microsoft SChannel Affects All Windows Software: Patch Your Systems ASAP! Don’t Wait Until It’s Exploited!" description: "Critical Crypto Flaw in Microsoft SChannel Affects All Windows Software: Patch Your Systems ASAP! Don’t Wait Until It’s Exploited!" image: https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/Microsoft-SCHANNEL-1.jpg --- [Skip to the main content.](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#main-content) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) - [Services](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) Toggle Menu Toggle Menu [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) - [Services *Toggle Menu*](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About *Toggle Menu*](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) - Example Link - Example Link - Example Link [*Facebook*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) [*Instagram*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) [*LinkedIn*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) [*Twitter*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) [*Youtube*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) [*Medium*](https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited#0) 1 min read # Critical Crypto Flaw in Microsoft SChannel Affects All Windows Software: Patch Your Systems ASAP! Don’t Wait Until It’s Exploited! [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Nov 18, 2014, 1:26:47 PM [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) ![Microsoft Secure Channel](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Blog%20Images/Imported_Blog_Media/Microsoft-SCHANNEL-1.jpg?width=200&name=Microsoft-SCHANNEL-1.jpg)A few months ago [Heartbleed](http://heartbleed.com/), apparently named after a James Bond villain, was a security bug that made headlines even in major, non-tech focused publications. This well-known bug was a flaw in the OpenSSL cryptography library, which is a layer of security between your computer and the servers of many major online services. Hackers were able to exploit this flaw and extract sensitive information such as usernames and passwords for websites including Facebook, Gmail, Netflix, and WordPress. Now another crypto flaw is making headlines. A security bulletin recently released by Microsoft warns service providers and IT administrators of a weakness in the Secure Channel (SChannel) provider that uses[Secure Sockets Layer (SSL) and Transport Layer Security (TLS)](http://en.wikipedia.org/wiki/Transport_Layer_Security) authentication protocols to secure web browsing and communication with other servers. Like Heartbleed, **this SChannel bug allows hackers to access to sensitive information.** While this flaw does affect every supported version of Windows and Windows Server software, Microsoft reminds users that so far no one has been attacked. “*Server and workstation systems that are running an affected version of SChannel are primarily at risk*,” the software juggernaut announced on Tuesday, November 11th. “*An attacker could attempt to exploit this vulnerability by sending specially crafted packets to a Windows server. Microsoft has not received any information to indicate that this vulnerability has been publicly used to attack customers*.” While no attacks have been reported yet, the clock is ticking. Experts estimate it is only a matter of days before someone exploits this vulnerability. “*My guess is that you probably have a week, maybe less, to patch your systems before an exploit is released*,” wrote Johannes Ullrich, Ph.D. in a [November 12th blog post](https://isc.sans.edu/forums/diary/How+bad+is+the+SCHANNEL+vulnerability+CVE-2014-6321+patched+in+MS14-066/18947) on the [Internet Storm Center](https://isc.sans.edu/) blog. Ullrich also advises service providers and IT administrators to take care while patching to protect themselves from future attacks using the SChannel bug. “*Patching is only in part about speed*,” Ullrich writes. “*Don’t let speed get in the way of good operations and procedures. It is at least as important to patch in a controlled, verifiable and reproducible way. Anything else will leave you open to attack due to incomplete patching*.” Only one question remains: what cool name will the media come up with for the SChannel bug to meet the bar that Heartbleed set? Skulldrop? Cliffjump? Devilfinger? Only time will tell. **To learn more about the SChannel bug and other urgent technology news, contact {company} immediately at {phone} or send us an email at {email}.** - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://ontimetech.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![Important Security Warning: Dramatic Increase In CryptoLocker Activity Picked Up By Our IT Security Professionals](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/96114678.jpg)](https://ontimetech.valeonetworks.com/blog/important-security-warning-dramatic-increase-in-cryptolocker-activity-picked-up-by-our-it-security-professionals) #### [Important Security Warning: Dramatic Increase In CryptoLocker Activity Picked Up By Our IT Security Professionals](https://ontimetech.valeonetworks.com/blog/important-security-warning-dramatic-increase-in-cryptolocker-activity-picked-up-by-our-it-security-professionals) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Jun 13, 2014, 3:08:00 PM Our team of IT security professionals would like to draw your attention to a high rate of malicious email traffic containing Cryptolocker malware... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/important-security-warning-dramatic-increase-in-cryptolocker-activity-picked-up-by-our-it-security-professionals) [![Apple Users Take Warning: Download a Critical Security Patch Immediately!](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/alert-1.jpg)](https://ontimetech.valeonetworks.com/blog/tech-tips/apple-users-take-warning-download-a-critical-security-patch-immediately) #### [Apple Users Take Warning: Download a Critical Security Patch Immediately!](https://ontimetech.valeonetworks.com/blog/tech-tips/apple-users-take-warning-download-a-critical-security-patch-immediately) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Dec 24, 2014, 12:58:33 AM If you’re reading this on an Apple device, sit up and pay attention. A rare security patch has been released by Apple that you need to install right... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/tech-tips/apple-users-take-warning-download-a-critical-security-patch-immediately) [![Which Walnut Creek IT Services Company Supports Local Business?](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-918348414.jpg)](https://ontimetech.valeonetworks.com/blog/walnut-creek-it-services) #### [Which Walnut Creek IT Services Company Supports Local Business?](https://ontimetech.valeonetworks.com/blog/walnut-creek-it-services) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Mar 16, 2019, 3:52:21 PM Why Does It Make Sense to Outsource IT Services? [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/walnut-creek-it-services) ![OTT White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/OTT%20Logo/OTT%20White%20logo.png?width=524&height=140&name=OTT%20White%20logo.png)   ##### About About On Time Tech is an IT Support and Computer Services company serving California. We provide services to the areas in and around We know businesses like yours need technology support in order to run highly-effective organizations. Leverage pro-growth technology services for your company now. ##### Explore On Time Time Explore On Time Time - [Our Services](https://ontimetech.valeonetworks.com/our-services/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [About](https://ontimetech.valeonetworks.com/about/) - [Contact](https://ontimetech.valeonetworks.com/contact/) ##### Contact Contact **San Francisco:** 1717 Fifth Ave San Rafael, CA 94901 [415-294-5250](tel:4152945250) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://ontimetech.valeonetworks.com/privacy-policy/) © 2026 On Time Tech [*Facebook*](https://www.facebook.com/ontimetechsf/)[*Twitter*](https://twitter.com/on_time_tech?lang=en)[*LinkedIn*](https://www.linkedin.com/company/ontimetech/)[*YouTube*](https://www.youtube.com/channel/UCubqs9PU_WWF-RFhfK9xNpw) [![Alura White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://ontimetech.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lance Stone", "url" : "https://ontimetech.valeonetworks.com/blog/author/ulisticadmin" }, "dateModified" : "2024-01-10T16:26:07.337Z", "datePublished" : "2014-11-18T18:26:47.000Z", "headline" : "Critical Crypto Flaw in Microsoft SChannel Affects All Windows Software: Patch Your Systems ASAP! Don’t Wait Until It’s Exploited!", "image" : [ "https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/Microsoft-SCHANNEL-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://ontimetech.valeonetworks.com/blog/tech-tips/critical-crypto-flaw-in-microsoft-schannel-affects-all-windows-software-patch-your-systems-asap-dont-wait-until-its-exploited", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://ontimetech.valeonetworks.com/hubfs/OTT%20-%20Color%20Logo.png" }, "name" : "Valeo Networks" } } ```