On Kryptera.se, writes the IT security specialist Jonas Lejon who has worked with encryption and qualified IT security for over 18 years. The site is independent and non-profit.
Jonas is one of Sweden's foremost experts in cyber security. Feel free to contact him on telephone number 010 1889848 or firstname.lastname@example.org if your organization needs help with cyber security. You can also contact me on LinkedIn or Twitter.
This article has been reposted with permission from Jonas Lejon.
Serious vulnerability in Windows Print Spooler "Print Nightmare"
If you have the "Print Spooler" service enabled (which is the default), it means that anyone with access can execute code as SYSTEM against the Windows domain controller. At present, there is no patch from Microsoft. So take a break from your vacation and turn off the service immediately.
From Tenable's blog:
Exploitation of CVE-2021-1675 could give remote attackers full control of vulnerable systems. To achieve RCE, attackers would need to target a user authenticated to the spooler service. Without authentication, the flaw could be exploited to elevate privileges, making this vulnerability a valuable link in an attack chain.
More information from Microsoft: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675