• BlueKeep now being used in attacks – but the sky isn’t falling

    Posted on November 3, 2019 at 07:25 CST by • Comment in the Forums

    Remember BlueKeep – the “wormable” monster infection that was supposed to take over the Windows world?

    Two months ago, I warned that there was a working exploit making the rounds.

    We finally saw a slightly modified version of that Metasploit exploit used in a for-real infection. Except it isn’t nearly as scary as originally projected, doesn’t operate as a worm, and isn’t exactly taking the world by storm.

    Kevin Beaumont found evidence of the infection in some honeypots he set up – but had stopped monitoring.

    https://twitter.com/GossiTheDog/status/1190654984553205761

    As expected, folks who have either disabled RDP or blocked port 3389 are fine. Still…

    Word to the wise: If you haven’t updated your Win7 or Server 2008/Server 2008R2 machine since May, you better get on the stick.

    See, there’s a reason why you have to update sooner or later.

    Full details from Catalin Cimpanu at ZDNet. Thx GoneToPlaid (who just had a Tesla mode named after him).

    UPDATE:

    https://twitter.com/GossiTheDog/status/1191148135344693248

    Windows Patches/Security
DON'T MISS OUT!
Subscribe to the Free Newsletter
We promise not to spam you. Unsubscribe at any time.
Invalid email address

View the Forum

  • Recent Replies
  • My Replies
  • My Active Topics
  • New Posts in the Last day
  • Private Messages
  • Knowledge Base
  • How to use the Forums
  • All Forums

    • Recent Topics

    My Profile

    April 2025
    S M T W T F S
     12345
    6789101112
    13141516171819
    20212223242526
    27282930  

    Remembering Woody

     

    Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.

    Mastodon profile for DefConPatch
    Mastodon profile for AskWoody

     

    Home • About • FAQ • Posts & Privacy • Forums • My Account
    Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts

    Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.