Every day around the world, we are seeing much news about how the “attackers” trying to break into corporate networks.
Couple weeks ago a new vulnerability was release (CVE-2019-0708) Remote Desktop Services Remote Code Execution Vulnerability Aka BlueKeep, when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Authored by: Saul Bustamante, Cyber Security, TCS