erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: May 8, 2018

1 editorial brief.

All digests · RSS · Markdown

Take stock

  • Check exposure: Windows COM CVE-2018-0824: APT41 Reuses a 2018 Exploit. Anyone still running Windows 7, 8.1, Windows 10 1803 or earlier, or Windows Server 2008 through 2016 hosts that have not taken updates since May 2018, especially research and government networks.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Vulnerability · CVE-2018-0824

Windows COM CVE-2018-0824: APT41 Reuses a 2018 Exploit

Fixed in May 2018 and absent from current Windows releases; the only real exposure is legacy hosts that have missed updates since 2018, which should be found and replaced or isolated.

Must act: Anyone still running Windows 7, 8.1, Windows 10 1803 or earlier, or Windows Server 2008 through 2016 hosts that have not taken updates since May 2018, especially research and government networks.

Can relax: Fleets patched at any point since May 2018; Windows 10 1809 and later, Windows 11 and Windows Server 2019 and later are not in Microsoft's affected list.

  1. List hosts still on Windows 7, 8.1, Windows 10 1803 or earlier, or Server 2008/2012-era builds.
  2. On each, confirm the May 2018 update for that version or later monthly updates are installed.
  3. Replace or isolate unsupported Windows hosts, and keep local logon on them limited to the people who need it.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.