Hackers exploited the publicly available code of an unpatched Windows vulnerability to attack at least one organization. The code was recently publicou released by a dissatisfied security researcher known by the pseudonym Chaotic Eclipse, after Microsoft failed to respond to his vulnerability report.
According to reports by Bloomberg, specialists from Huntress have recorded the use of three Windows vulnerabilities named BlueHammer, UnDefend, and RedSun. These flaws affect the Windows Defender antivirus and allow attackers to gain administrator rights on the compromised computer. The code to exploit these vulnerabilities was published by Chaotic Eclipse on GitHub.
"I was not bluffing in front of Microsoft, and I'm doing it again," he wrote. "Huge thanks to the MSRC leadership for making this possible," added Chaotic Eclipse, referring to the Microsoft Cybersecurity Response Center, which investigates and handles vulnerability reports.
As of now, Microsoft has released a patch for only one of the three vulnerabilities — BlueHammer, with a fix that became available this week. The other two flaws, UnDefend and RedSun, remain unaddressed, continuing to pose a threat to systems. The identities of the hackers themselves, as well as their targets, have not yet been determined.
John Hammond, a researcher from Huntress, noted that the availability of ready-made attack tools turns defense into an exhausting race against criminals. A Microsoft representative, Ben Hope, responded by stating that the company supports coordinated vulnerability disclosure and resolving issues before they are publicly disclosed.
Fonte:
Fonte: 3dnews.ru
