Chances of destructive BlueKeep exploit rise with new explainer posted online

'A security researcher has published a detailed guide that shows how
to execute malicious code on Windows computers still vulnerable to the
critical BlueKeep vulnerability. The move significantly lowers the bar
for writing exploits that wreak the kinds of destructive attacks not
seen since the WannaCry and NotPetya attacks of 2017, researchers
said.

As of three weeks ago, more than 800,000 computers exposed to the
Internet were vulnerable to the exploit, researchers from security
firm BitSight said last week. Microsoft and a chorus of security
professionals have warned of the potential for exploits to sow
worldwide disruptions. The risk of the bug, found in Microsoft's
implementation of the remote desktop protocol, stems from the ability
for attacks to spread from one vulnerable computer to another with no
interaction required of end users.'

-- source: https://arstechnica.com/information-technology/2019/07/explainer-for-exploiting-wormable-bluekeep-flaw-posted-on-github/

May you live in interesting times (as a Windows users)...

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug