Microsoft Windows security news: Windows 'Golden Key' leak causes security panic

Microsoft has inadvertently committed a serious security blunder that could potentially put Windows users at risk. Recently, two hackers discovered a clever workaround to bypass the software giant's "secure boot" following an error that resulted in an accidental "golden key" leak.

In a nutshell, the security mess has just rendered the hardware's protective features virtually helpless against the possible intrusion of non-Microsoft operating systems into Windows devices like personal computers, tablets, phones or even HoloLens.

Moreover, when the golden key falls into the wrong hands, unscrupulous hackers will have tremendous ease of access to load malware like the dreaded rootkit which gives cyber-attacker control over devices that run on Windows OS.

In a Star Wars-themed revelation, security researchers codenamed "MY123" and "Slipstream" stumbled upon the golden key pre-loaded in a number of Windows devices, The Register reported. It was supposedly intended to give Microsoft developers a shortcut when working around the typical OS security checks to validate the authenticity of the Redmond-designed software. This is what tech analysts refer to as the backdoor.

"A backdoor, which MS put in to secure boot because they decided to not let the user turn it off in certain devices, allows for secure boot to be disabled everywhere! You can see the irony. Also the irony in that MS themselves provided us several nice 'golden keys' (as the FBI would say) for us to use for that purpose," the hackers revealed in a statement.

The recent security leak brings to mind Apple's stubborn refusal to create a backdoor access to its iOS devices after the Federal Bureau of Investigation requested the tech firm to create such in order for law enforcement to hack into the San Bernardino shooters' iPhones. In a strong display of defiance to authorities, Apple CEO Tim Cook said in an open letter that any attempt to create a security bypass will have serious consequences.

"Building a version of iOS that bypasses security in this way would undeniably create a backdoor... there is no way to guarantee such control," said Cook in a statement.