Discussion

• @ravivtamir @ravivtamir on x

  Worried about DNS server vuln made public today? Check out your org posture with this dedicated MDATP threat analytics report https://securitycenter.microsoft.com/ ... https://twitter.com/...

• @lukolejnik Lukasz Olejnik on x

  Very serious, exploitable and wormable vulnerability in Windows DNS Server. Need to be patched at a scale to «vaccinate» the internet from hypothetical self-propagating malware. Risk: max. https://msrc-blog.microsoft.com/ ... https://portal.msrc.microsoft.com/ ... https://twitter…

• @msftsecresponse @msftsecresponse on x

  July 2020 Security Update includes a fix for a wormable RCE vulnerability in Windows DNS Server affecting all versions of Windows server running the DNS Server role. This should be patched quickly. For more information, see: https://msrc-blog.microsoft.com/ ...

• @bmenrigh Symmetric on x

  So about this SIGRed Microsoft DNS Server vulnerability (CVE-2020-1350). Microsoft calls it “wormable”. https://msrc-blog.microsoft.com/ ... So what would/could a worm for a vuln like this even look like? It probably wouldn't be a ‘normal’ worm. A (long) thread. 1/20

• @iscdotorg ISC on x

  Microsoft DNS published a critical severity issue today. https://msrc-blog.microsoft.com/ ...

• @lassfolk Markus Lassfolk on x

  Patch your Domain Controllers running DNS at once. This one is as bas as it can get. https://twitter.com/...

• @leojtravis10 Joe Ortiz on x

  “The vulnerability would allow hackers to intercept and interfere with users' emails and network traffic, tamper with services, and steal users' credentials, by exploiting Windows' DNS Server” This shouldn't take close to 20 years to patch but well done Check Point on this. https…

• @campuscodi Catalin Cimpanu on x

  Microsoft has issued a blog post confirming that SIGRed is wormable MSFT blog: https://msrc-blog.microsoft.com/ ... Check Point SIGRed research: https://research.checkpoint.com/ ... https://twitter.com/...

• @cisakrebs Chris Krebs on x

  Recycling from yesterday (evergreen tweet these days???): https://twitter.com/... https://twitter.com/...

• @alexstamos Alex Stamos on x

  Whoa. https://twitter.com/...

• @msftsecintel @msftsecintel on x

  The July 2020 security updates are available and include a fix for a wormable RCE vulnerability in Windows DNS Server that should be immediately patched: https://twitter.com/...

• @singe Dominic White on x

  CheckPoint says exploitation gets you DA, most DC's are also DNS servers. The mitigation looks like a limit on DNS packet sizes ... https://twitter.com/...

• @backchnnl Backchannel on x

  The SigRed vulnerability exists in Windows DNS, used by practically every small and medium-sized organization in the world. https://www.wired.com/...

• @shanvav Shannon Vavra on x

  Microsoft is issuing a patch for a severe wormable Windows DNS Server flaw affecting *all Windows Server versions.* Wormable flaws can be particularly menacing as attacks can spread machine to machine w/o human interaction, à la WannaCry @CyberScoopNews https://www.cyberscoop.com…