RACS

Hi Admins, Time to Patch ASAP.

I can only hope that NONE of you have publicly exposed RDP servers that allow RDP access without a VPN.
If you do, PATCH NOW.

If you don't have publicly exposed RDP servers, STILL PATCH NOW.
A precaution in case a computer INSIDE YOUR LAN gets hit by malicious code that in turn can hit your servers internally.
Remember that something like this almost cost the huge container shipping company Maersk their business.
Many other businesses have also been hit over the years.

Just sharing and caring.
This is one of the most serious ones we have seen.
Microsoft have even created a Windows XP patch for this one.
This means sh*t is about to get VERY VERY real.

https://blogs.technet.microsoft.com/msrc/2019/05/14/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708



https://krebsonsecurity.com/2019/05/microsoft-patches-wormable-flaw-in-windows-xp-7-and-windows-2003/

Prevent a worm by updating Remote Desktop Services (CVE-2019-0708) Today Microsoft released fixes for a critical Remote Code Ex*****on vulnerability, CVE-2019-0708, in Remote Desktop Services – formerly known as Terminal Services – that affects some older versions of Windows. The Remote Desktop Protocol (RDP) itself is not vulnerable. This vulnerability is pre-...