ID Verified
Trusted
It looks like the not so secret 'secret' that the NSA was holding back unreleased 0-Day exploits has been proven true.
A stack of alleged NSA exploits for all Windows OS's older than 8.1 & Server 2012 R2 have been released into the wild.
List of exploits:
- ETERNALROMANCE — Remote privilege escalation (SYSTEM) exploit (Windows XP to Windows 2008 over TCP port 445)
- ENTERNALCHAMPION, ETERNALSYSTEM — Remote exploit up to Windows 8 and 2012
- ETERNALBLUE — Remote Exploit via SMB & NBT (Windows XP to Windows 2012)
- EXPLODINGCAN — Remote IIS 6.0 exploit for Windows 2003
- EWORKFRENZY — Lotus Domino 6.5.4 and 7.0.2 exploit
- ETERNALSYNERGY — Windows 8 and Windows Server 2012
- FUZZBUNCH — Exploit Framework (Similar to Metasploit) for the exploits.
It will be interesting to see how quickly Microsoft respond considering we're only 3 days into this patch month.
Edit: update from Microsoft is that you're not at risk if fully patched. https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/
