And now that it’s public it’s less likely to scream “nation-state”
CVE-2020-0601 looks pretty bad if it affects all TLS x509 validation. Thats a career making bug so I feel bad for the anonymous person who found it (you are awesome!). Cool that @NSAGov reported it, but no one said they can‘t use it in some foreign unpatched domains.
-
-
-
Yep. Interesting thing about a bug like this is it barely screams at all, especially if you have a privileged position on the network from which to collect signal
Kraj razgovora
Novi razgovor -
-
-
Outside of this vulnerability a lot of people have WSUS configured to download updates over HTTP which results in RCE since you can use a valid signed Microsoft binary (e.g. sysinternals) to bypass the signature check if only HTTP is usedhttps://www.contextis.com/en/resources/white-papers/wsuspect-compromising-the-windows-enterprise-via-windows-update …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.