Monday, July 15, 2024

32TB of Windows 10 Internal builds & Source Code leaked online

Around 32TB of Windows 10 internal builds, including non-public installation images and software blueprints, upload online by an anonymous person on June 19.

Normally, internal builds were created by Microsoft engineers for bug-hunting and testing purposes. These private debugging symbols are normally stripped out in public releases.

The Leaked files are uploaded to the betaarchive website and very few people have access to that over FTP. Because downloading files from BetaArchive is not that much easy. According to experts who reviewed the source, it has the following reports, Register.

  • The source code of Windows 10 hardware drivers plus Redmond’s PnP code.
  • USB and Wi-Fi stacks.
  • Storage drivers.
  • ARM-specific OneCore kernel code.

Also read Windows Registry Analysis – Tracking Everything You Do on the System

The BetaArchive indicates that debugging symbols for the Windows 10 source code was also leaked. Any individual who has this data can use it for finding vulnerabilities, which could be utilized to hack Windows machines around the world.

Also, the leak consists of Multiple version of Microsoft’s Windows 10 Mobile Adaptation Kit, a private programming kit made by Microsoft meant to run Windows 10 working operating system on mobile devices.

But as indicated by experts, this is not as terrible as it sounds. The leaked source code is a part of the Microsoft’s Shared Source Kit program, and the majority of it was already accessible on the web.

Recent update from Betaarchive

At the time of writing this article, we saw a Statement published by BetaArchive indicates the contents have been removed already.

Betaarchive says "First of all let us clear up a few facts.The “Shared Source Kit”
 folder did exist on the FTP until this article came to light. We have removed it
from our FTP and listings pending further review just in case we missed something
in our initial release. We currently have no plans to restore it until a full
review of its contents is carried out and it is deemed acceptable under our rules."

As per update on 09:58 GMT 24/06/2017 Microsoft spokesperson contacted The Register and said: “Our review confirms that these files are actually a portion of the source code from the Shared Source Initiative and is used by OEMs and partners.”

Also read NSA Malware “EternalBlue” Successfully Exploit into Microsoft Windows 10


Latest articles

Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code

A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as...

Singapore Banks to Phase out OTPs for Bank Account Logins Within 3 Months

The Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS)...

GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data

A Houthi-aligned group has been deploying Android surveillanceware called GuardZoo since October 2019 to...

ViperSoftX Weaponizing AutoIt & CLR For Stealthy PowerShell Execution

ViperSoftX is an advanced malware that has become more complicated since its recognition in...

Malicious NuGet Campaign Tricking Developers To Inject Malicious Code

Hackers often target NuGet as it's a popular package manager for .NET, which developers...

Akira Ransomware Attacking Airline Industry With Legitimate Tools

Airlines often become the target of hackers as they contain sensitive personal and financial...

DarkGate Malware Exploiting Excel Files And SMB File Shares

DarkGate, a Malware-as-a-Service (MaaS) platform, experienced a surge in activity since September 2023, employing...
Guru baran
Guru baran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles