The Department of Homeland Security has developed a working exploit for the BlueKeep vulnerability. The agency issued an alert on Monday urging Windows users to update their machines as soon as possible. The critical remote code execution vulnerability (CVE-2019-0708) was fixed during Microsoft s May Patch Tuesday Security Bulletin. Experts have warned that it could pave the way for a similar rapidly-propogating attack on the scale of the devastating 2017 WannaCry attack. As of the end of May, one million devices were still vulnerable to BlueKeep.
Source: https://threatpost.com/working-bluekeep-exploit-developed-by-dhs/145784/