Lenovo: researchers find 'massive security risk'

The Chinese PC manufacturer Lenovo has been accused of running a "massive security risk" after researchers found flaws in its software. Three vulnerabilities could be exploited to install malware on users' systems or to hand attackers a measure of control over them, it was reported. Lenovo acknowledged the findings and urged users to download a patch to resolve the issues. The news follows revelations about pre-installed adware on Lenovo systems.
The vulnerabilities were discovered by researchers at security firm IOActive, who alerted Lenovo to them in February this year. The patch was released in April, but the researchers' findings were only made public the week of May 4th 2015.

Please contact the Help Desk if you use a Lenovo computer: http://www.umassmed.edu/it/who-we-are/where-to-find-us/