Cybersecurity researchers have identified a critical 0-day vulnerability in Windows Server 2012 and Server 2012 R2.
This previously unknown security flaw allows attackers to bypass the Mark of the Web (MoTW) verification on certain files, posing a significant threat to affected systems.
The vulnerability, which was introduced over two years ago, has managed to evade detection despite the high level of scrutiny applied to Windows Server systems.
Even servers that have been fully updated with Extended Security Updates are vulnerable. This discovery underscores the persistent challenges in maintaining security in older software systems.
Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar
The researchers, who are holding back detailed information to prevent potential exploitation, have already notified Microsoft, as a report by 0Patch. They are awaiting an official fix from the tech giant, which could take time given the complexity of the issue.
In response to this critical security gap, the researchers have promptly issued micropatches.
These temporary fixes are being provided free of charge until Microsoft releases an official update. The micro patches cover the following configurations:
These patches have been seamlessly distributed to all affected computers with the 0patch Agent in PRO or Enterprise accounts.
Users can apply these micropatches without needing to reboot their systems, ensuring minimal disruption to operations.
The discovery of this vulnerability highlights the ongoing risk associated with unsupported Windows versions. Vulnerabilities are routinely identified and can be exploited by attackers aware of these security lapses.
This proactive approach is crucial in maintaining security while awaiting a more permanent solution from Microsoft.
It emphasizes the importance of layered security strategies and the role of third-party solutions in closing gaps left by official updates.
Analyse Advanced Malware & Phishing Analysis With ANY.RUN Black Friday Deals : Get up to 3 Free Licenses.
Southeast Asian Advanced Persistent Threat (APT) group OceanLotus, also known as APT32, has been identified…
AkiraBot, identified by SentinelLABS, represents a sophisticated spam bot framework that targets website chats and…
A new vulnerability has been discovered in the Microsoft.Identity.Web NuGet package under specific conditions, potentially…
The cybersecurity realm has encountered a formidable adversary with the emergence of CatB ransomware, also…
In a major victory against cybercrime, law enforcement agencies across North America and Europe have…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued alerts regarding two actively exploited vulnerabilities…