{"id":45644,"date":"2021-07-07T18:10:37","date_gmt":"2021-07-07T22:10:37","guid":{"rendered":"http:\/\/pappp.net\/?guid=0da86012464d5e16a60bf9d965cd9268"},"modified":"2021-07-07T18:10:37","modified_gmt":"2021-07-07T22:10:37","slug":"microsofts-emergency-patch-fails-to-fix-critical-printnightmare-vulnerability","status":"publish","type":"post","link":"https:\/\/pappp.net\/?p=45644","title":{"rendered":"Microsoft\u2019s emergency patch fails to fix critical \u201cPrintNightmare\u201d vulnerability"},"content":{"rendered":"

Source: Ars Technica<\/a><\/p>\n

Article note: The \"cybersecurity\" landscape at the moment is really pretty ghastly.\nIt's been a while since Microsoft shit the bed this hard. \nNow all we need is a worm that uses the RCE with a ransomware payload to bring \"old computer suck\" and \"modern computer suck\" together.<\/div>
\n
\"Skull

Enlarge<\/a> (credit: Getty Images<\/a>)<\/p> <\/figure>

<\/a><\/div>\n

An emergency patch Microsoft issued on Tuesday fails to fully fix a critical security vulnerability in all supported versions of Windows that allows attackers to take control of infected systems and run code of their choice, researchers said.<\/p>\n

The threat, colloquially known as PrintNightmare, stems from bugs in the Windows print spooler, which provides printing functionality inside local networks. Proof-of-concept exploit code was publicly released and then pulled back, but not before others had copied it. Researchers track the vulnerability as CVE-2021-34527.<\/p>\n

A big deal<\/h2>\n

Attackers can exploit it remotely when print capabilities are exposed to the Internet. Attackers can also use it to escalate system privileges once they’ve used a different vulnerability to gain a toe-hold inside of a vulnerable network. In either case, the adversaries can then gain control of the domain controller, which as the server that authenticates local users, is one of the most security-sensitive assets on any Windows network.<\/p><\/div>

Read 12 remaining paragraphs<\/a> | Comments<\/a><\/p>

\n<\/a> <\/a> <\/a> <\/a>\n<\/div>","protected":false},"excerpt":{"rendered":"

Enlarge (credit: Getty Images)
\nAn emergency patch Microsoft issued on Tuesday fails to fully fix …<\/p>\n

Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226],"tags":[],"class_list":["post-45644","post","type-post","status-publish","format-standard","hentry","category-news-2"],"_links":{"self":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/45644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=45644"}],"version-history":[{"count":0,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/45644\/revisions"}],"wp:attachment":[{"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=45644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=45644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=45644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}