Get a Pentest and security assessment of your IT network.

Cyber Security

SMBGhost RCE Exploit Threatens Corporate Networks

The release of a PoC for the Windows flaw known as SMBGhost could set off cyberattack waves, CISA warned. Microsoft patched the bug tracked as CVE-2020-0796 back in March; also known as SMBGhost or CoronaBlue, it affects Windows 10 and Windows Server 2019. The bug is an integer overflow vulnerability in the SMBv3.1 message decompression routine of the kernel driver srv2.sys.sys. It exists in version 3.1.1 of the Microsoft Server Message Block (SMB) protocol the same protocol that was targeted by WannaCry ransomware in 2017.

Source: https://threatpost.com/smbghost-rce-exploit-corporate-networks/156391/

Related posts
Cyber Security

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

Cyber Security

Art of Twitter account hacking

Cyber Security

Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate

Cyber Security

Dan Geer, Richard Thieme on specialization in security