Microsoft issues a patch for a critical “wormable” flaw affecting OSes including Windows 10 and Server; Check Point says the flaw has been in code for 17 years
Worried about DNS server vuln made public today? Check out your org posture with this dedicated MDATP threat analytics report https://securitycenter.microsoft.com/ ... https://twitter.com/...
@lukolejnik
Lukasz Olejnik on x
Very serious, exploitable and wormable vulnerability in Windows DNS Server. Need to be patched at a scale to «vaccinate» the internet from hypothetical self-propagating malware. Risk: max. https://msrc-blog.microsoft.com/ ... https://portal.msrc.microsoft.com/ ... https://twitter…
@msftsecresponse
@msftsecresponse on x
July 2020 Security Update includes a fix for a wormable RCE vulnerability in Windows DNS Server affecting all versions of Windows server running the DNS Server role. This should be patched quickly. For more information, see: https://msrc-blog.microsoft.com/ ...
@bmenrigh
Symmetric on x
So about this SIGRed Microsoft DNS Server vulnerability (CVE-2020-1350). Microsoft calls it “wormable”. https://msrc-blog.microsoft.com/ ... So what would/could a worm for a vuln like this even look like? It probably wouldn't be a ‘normal’ worm. A (long) thread. 1/20
@iscdotorg
ISC on x
Microsoft DNS published a critical severity issue today. https://msrc-blog.microsoft.com/ ...
@lassfolk
Markus Lassfolk on x
Patch your Domain Controllers running DNS at once. This one is as bas as it can get. https://twitter.com/...
@leojtravis10
Joe Ortiz on x
“The vulnerability would allow hackers to intercept and interfere with users' emails and network traffic, tamper with services, and steal users' credentials, by exploiting Windows' DNS Server” This shouldn't take close to 20 years to patch but well done Check Point on this. https…
@campuscodi
Catalin Cimpanu on x
Microsoft has issued a blog post confirming that SIGRed is wormable MSFT blog: https://msrc-blog.microsoft.com/ ... Check Point SIGRed research: https://research.checkpoint.com/ ... https://twitter.com/...
@cisakrebs
Chris Krebs on x
Recycling from yesterday (evergreen tweet these days???): https://twitter.com/... https://twitter.com/...
@alexstamos
Alex Stamos on x
Whoa. https://twitter.com/...
@msftsecintel
@msftsecintel on x
The July 2020 security updates are available and include a fix for a wormable RCE vulnerability in Windows DNS Server that should be immediately patched: https://twitter.com/...
@singe
Dominic White on x
CheckPoint says exploitation gets you DA, most DC's are also DNS servers. The mitigation looks like a limit on DNS packet sizes ... https://twitter.com/...
@backchnnl
Backchannel on x
The SigRed vulnerability exists in Windows DNS, used by practically every small and medium-sized organization in the world. https://www.wired.com/...
@shanvav
Shannon Vavra on x
Microsoft is issuing a patch for a severe wormable Windows DNS Server flaw affecting *all Windows Server versions.* Wormable flaws can be particularly menacing as attacks can spread machine to machine w/o human interaction, à la WannaCry @CyberScoopNews https://www.cyberscoop.com…