Threat Source newsletter (Sept. 5, 2019)
Summary: Cisco Talos' Sept. 5, 2019 Threat Source newsletter notes that BlueKeep, a wormable bug compared to WannaCry, has not yet been used in a large-scale attack, and that Microsoft disclosed additional wormable RDP vulnerabilities called "DejaBlue." The newsletter also lists advisories for an information disclosure in Blynk-Library and two bugs in Epignosis eFront, and describes a German initiative to add a formal IT Security apprenticeship program.
Bottom line: BlueKeep drew WannaCry comparisons but stayed quiet, while DejaBlue added another set of wormable RDP flaws - a reminder that the window between disclosure and exploitation is the exposure a security leader has to manage.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026