• BlueKeep now being used in attacks – but the sky isn’t falling

    Posted on November 3, 2019 at 07:25 CST by • Comment in the Forums

    Remember BlueKeep – the “wormable” monster infection that was supposed to take over the Windows world?

    Two months ago, I warned that there was a working exploit making the rounds.

    We finally saw a slightly modified version of that Metasploit exploit used in a for-real infection. Except it isn’t nearly as scary as originally projected, doesn’t operate as a worm, and isn’t exactly taking the world by storm.

    Kevin Beaumont found evidence of the infection in some honeypots he set up – but had stopped monitoring.

    As expected, folks who have either disabled RDP or blocked port 3389 are fine. Still…

    Word to the wise: If you haven’t updated your Win7 or Server 2008/Server 2008R2 machine since May, you better get on the stick.

    See, there’s a reason why you have to update sooner or later.

    Full details from Catalin Cimpanu at ZDNet. Thx GoneToPlaid (who just had a Tesla mode named after him).

    UPDATE:

    Windows Patches/Security
DON'T MISS OUT!
Subscribe to the AskWoody Free Newsletter
We promise not to spam you. Unsubscribe at any time.
Invalid email address

View the Forum

  • Recent Replies
  • My Replies
  • My Active Topics
  • New Posts in the Last day
  • Private Messages
  • All Forums

    • Recent Topics

    My Profile

    May 2022
    S M T W T F S
    1234567
    891011121314
    15161718192021
    22232425262728
    293031  

    Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.

    Home • About • FAQ • Posts & Privacy • Forums • My Account
    Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts

    Copyright ©2004-2022 by AskWoody Tech LLC. All Rights Reserved.