(May 16, 2019) - Microsoft recently announced a
critical vulnerability in its Windows operating systems so serious
that it is issuing a patch for even unsupported, older versions of
Windows. The vulnerability allows for remote code execution in
Remote Desktop Services with no authentication at all. In fact,
there is no user interaction of any kind required for a malicious
actor to exploit the vulnerability.
Microsoft's Simon Pope, director of incident response at
Microsoft's Security Response Center, further described the
threat to The Verge as follows: "the
vulnerability is 'wormable', meaning that any future
malware that exploits this vulnerability could propagate from
vulnerable computer to vulnerable computer in a similar way as the
WannaCry malware spread across the globe in 2017."
