You’ll recall that I brought you the story of a serious bug in Windows called PrintNightmare which was being exploited. Microsoft has issued out-of-band patches for this bug. Sort of. Patches are available for the following operating systems: Windows Server 2019 Windows Server 2012 R2 Windows Server 2008 Windows 8.1 Windows RT 8.1 A variety […]
Search Results
Microsoft Sort Of Fixes PrintNightmare
July 7, 2021Microsoft’s Fix For “PrintNightmare” May Not Work And May Break Printers
July 9, 2021Microsoft has released fixes for the rather severe “PrintNightmare” flaw for all versions of Windows 10 as well as earlier versions of Windows including Windows 7. Thus you should get about patching all the things. But here’s the catch. There’s two reports from Windows Central that suggests that printing may break for you after installing […]
CISA & FBI Say That Russian Threat Actors Exploiting Print Nightmare And MFA Flaws To Pwn High Value Networks
March 17, 2022The CISA and the FBI have put out an alert that Russian state-sponsored hackers have exploited default MFA protocols and a Windows 10 printer flaw, ‘PrintNightmare’, to compromise networks and high-value domains in order to access victims’ cloud and email. Saumitra Das, CTO and Co-Founder, Blue Hexagon had this to say: “This shows very novel tradecraft being used […]
Microsoft Warns Users About Print Spooler Vulnerability That Is Being Exploited
July 2, 2021Microsoft has put out a warning regarding a serious new vulnerability that allows a remote attacker to pwn your computer. Called ‘PrintNightmare,’ the security flaw exists within the Windows Print Spooler service, which helps handle printing jobs. And apparently accordingly to The Verge, it’s being actively exploited. There are currently no patches that fix the […]
#Fail: Another Windows Print Spooler Exploit Has Been Discovered
July 17, 2021Microsoft has revealed yet another vulnerability connected to its Windows Print Spooler service. This just after fixing “PrintNightmare“. Maybe. Either way, it’s not a good look for Microsoft. This one is listed as CVE-2021-34481, and can be exploited to elevate privilege to system level via file operations. That makes it really dangerous. Microsoft is working on yet […]
The PrintNightmare Continues For Microsoft
August 13, 2021Did you think that PrintNightmare was over because Microsoft released some patches to try and address it? I’m here to tell you that it isn’t over. Microsoft came up with a new “mitigation” which requires administrator privileges for Point and Print driver installation and update: Today, we are addressing this risk by changing the default […]
Posted in Commentary | Leave a Comment »