News for hackers. Stuff that matters.

A comment on Windows has a new wormable vulnerability, with no patch.

Re:Windows has a new wormable vulnerability, with no patch by ck2 on Wednesday March 11, 2020 @01:23PM (#22547714)
block port 445 inbound, it's more than nothing
[ Parent | on HN ]
Re:Windows has a new wormable vulnerability, with no patch by gruez on Wednesday March 11, 2020 @04:11PM (#22549947)
You’d want to block 445 outbound as well, in case your computer tries to connect to an external server (eg. social engineering and/or UNC paths)
[ Parent | on HN ]
Re:Windows has a new wormable vulnerability, with no patch by pixl97 on Wednesday March 11, 2020 @04:00PM (#22549868)
The vast majority of desktop computers will not need 445 inbound. If you happen to have some enterprise tool that does, just add an allow rule for those particular servers. This protects you against a large number of other attacks such as ransomware over the local network too.
[ Parent | on HN ]