After Microsoft warned Windows users on two separate occasions to patch a severe security flaw known as BlueKeep, now, the US National Security Agency has echoed the OS maker's warning in the hopes of avoiding another WannaCry-like incident.
The NSA's alert, authored by the agency's Central Security Service division, is about the security flaw known as BlueKeep (CVE-2019-0708).
This vulnerability affects the Remote Desktop Protocol (RDP) service included in older versions of the Windows OS, such as Windows XP, Windows Vista, Windows 7, Windows Server 2003, and Windows Server 2008.
Microsoft released patches for all these operating systems on May 14, during the company's monthly Patch Tuesday event, but the company also warned that the vulnerability is extremely dangerous because it can be weaponized to create a self-spreading exploit.
more here:
https://www.zdnet.com/article/even-the-nsa-is-urging-windows-users-to-patch-bluekeep-cve-2019-0708/