• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

SwaCash | Internet Marketing News

Latest Updates on Tech, Internet & Digital World

  • Home
  • Digital Marketing
  • Social Media
  • Technology
  • About
  • Contact Us
You are here: Home / News / Microsoft is deploying an urgent patch to correct the PrintNightmare flaw

Microsoft is deploying an urgent patch to correct the PrintNightmare flaw

July 8, 2021 by Amer Bekic

To correct this flaw, Microsoft has released an emergency update for all recent versions of Windows, including Windows 7.

Photo by Tadas Sar on Unsplash

On June 29, several researchers from the company Sangfor mistakenly disclosed their method of exploiting a Windows flaw that they themselves discovered, called PrintNightmare. The problem is, Microsoft had not yet deployed a patch when they posted their documentation online detailing how the vulnerability could be exploited. The researchers quickly deleted their software test, but the damage was already done, and it ended up on GitHub.

As the name suggests, this flaw is located in the Windows print task manager, called the print spooler. The latter allows you to manage. By exploiting PrintNightmare, an attacker can execute code on a user’s machine. “An attacker could then install programs, view, modify or delete data, or create new accounts with full user rights,” warns Microsoft.

Microsoft partially fixed the flaw

Max Heinemeyer, of computer security firm Darktrace, told the BBC that PrintNightmare is like “a cyber bazooka – it’s relatively easy for criminals to use and can be used to make a huge impact.“

Initially, Microsoft, with the help of several private companies, deployed several measures to prevent the exploitation of this vulnerability. For this, the spooler has been disabled. However, this prevented network users from printing documents. This solution, although temporary, prevented the problem from worsening.

Finally, on July 6, Microsoft released a patch to fix this flaw, identified with serial number CVE-2021-34527. Now corrected, just download the update. “We recommend that you install these updates immediately,”  the company warns.

However, fixing a vulnerability so quickly means that the patch is not perfect. As BleepingComputer points out, there are still risks. Proof of Concept (POC), concrete validation steps, resist PrintNightmare. Indeed, a hacker could still gain administrator rights on the system and access a user’s documents. Despite everything, this must be done from inside the organization, which limits the risks of major attacks, as Cyberwar indicates .

Also, although the patch is available for most versions of Windows, some are not yet covered, such as Windows Server 2016. Users have also revealed that for them the patch just does not work.

Filed Under: News, Technology

Primary Sidebar

E-mail Newsletter

More Articles

Three Tweets related to EtherRock sales

Not one not two, Three digital pet rock cliparts sell for $600K each

August 22, 2021 By Amer Bekic

PolyNetwork Hacking Incedence

Hacker who stole $800 Million, now offered a white hat job by its victim firm

August 20, 2021 By Amer Bekic

credit card back panel containing the magnetic stripe

MasterCard announces future without magnetic stripe on the back.

August 17, 2021 By Amer Bekic

Fortune magazine sells its cover art as NFT. Raises 1.3 Million dollars

August 14, 2021 By Amer Bekic

Bored Ape Yacht Club Token 3749

This bored ape pic just sold for 1.29 Million dollars!

August 14, 2021 By Amer Bekic

Footer

Search this site

Recent Articles

  • Not one not two, Three digital pet rock cliparts sell for $600K each
  • Hacker who stole $800 Million, now offered a white hat job by its victim firm
  • MasterCard announces future without magnetic stripe on the back.
  • Fortune magazine sells its cover art as NFT. Raises 1.3 Million dollars
  • This bored ape pic just sold for 1.29 Million dollars!

Browse Topics

  • Blogging (164)
  • Content Marketing (7)
  • Cryptocurrency (5)
  • Digital Marketin (4)
  • Digital Marketing (333)
  • E-commerce (122)
  • Google (195)
  • Google Ads (24)
  • Marketing (166)
  • News (344)
  • Seo (74)
  • Social Media (43)
  • Technology (27)
  • Uncategorized (82)
  • WordPress (22)

Tags

Amazon Android Apple Apple Watch Artificial Intelligence B2B Bitcoin Blogging China Content Content Marketing Coronavirus Cryptocurrency Cybercriminals cybersecurity Digital Digital Marketing Facebook Gaming Google Increase Sales Instagram Intel internet strategy iOS 15 iPhone iPhone 12 IPhone 13 Make Money Marketing Microsoft Nvidia Online Marketing Samsung Science Search engine optimization Seo SEO optimization by content Social Media Social networks Technology TikTok Twitter Windows 11 YouTube

© 2019–2023 · SwaCash.com