Hackers Offer Bounty for Windows RDP Exploit
Summary: Contributors to gun.io, a site for independent and open source developers, pledged at least $1,435 to the first person who develops a working exploit for one of two critical Remote Desktop Protocol vulnerabilities Microsoft patched on Tuesday. Most of the money was put up by Rapid7's HD Moore, and the reward is for an exploit that runs as a module in Metasploit, his open source penetration testing platform.
What's compelling: The bounty sits far below what such a weapon would fetch on the underground market, and unconfirmed reports said a working exploit had already been posted to Chinese-language forums - meaning the window between patch and public exploit may be measured in days.
Read the original at Krebs on Security ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026