The CERT Coordination Center and CISA are warning all IT administrators about a remote code execution vulnerability in the Windows Print Spooler service. This vulnerability has PoC exploit code that has been published, making the risk of attack high. An attacker can exploit this vulnerability, nicknamed PrintNightmare, to take control of an affected system.
CISA encourages administrators to disable the Windows Print spooler service in Domain Controllers and systems that do not print.
More information can be found here - https://www.kb.cert.org/vuls/id/383432
Related Resources
IT Mentorship in Your Inbox
Subscribe and stay up to date on the latest insights, expert advice, and happenings in IT.