“PrintNightmare will remain a valuable exploit for cybercriminals as long as there are unpatched systems out there, and as we know, unpatched vulnerabilities have a long shelf life for attackers.” “We expect it will only be a matter of time before it is more broadly incorporated into attacker toolkits,” Narang said. Satnam Narang, staff research engineer at Tenable, said Microsoft’s patch warrants urgent attention because of the vulnerability’s ubiquity across organizations and the prospect that attackers could exploit this flaw in order to take over a Windows domain controller. Microsoft says it has already detected active exploitation of the vulnerability. The fix comes a week ahead of Microsoft’s normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers.Īt issue is CVE-2021-34527, which involves a flaw in the Windows Print Spooler service that could be exploited by attackers to run code of their choice on a target’s system.
Microsoft on Tuesday issued an emergency software update to quash a security bug that’s been dubbed “ PrintNightmare,” a critical vulnerability in all supported versions of Windows that is actively being exploited.
0 kommentar(er)
