Der klassische Windows-Print-Stack ist über Jahrzehnte gewachsen, mit Treibern und Berechtigungen, die längst zur Angriffsfläche wurden. Print­Nightmare zeigte 2021, wie weit das reichen kann. Microsofts Windows Protected Print (WPP) setzt deshalb an der Architektur selbst an, statt nur einzelne Treiber nachzubessern. Für IT-Teams wird die Einführung damit zur dringenden Aufgabe.

Following the publication of my blog post A Practical Guide to PrintNightmare in 2024, a few people brought to my attention that there was a way to bypass the Point and Print (PnP) restrictions recomm...

YouTube video by Glass of 0J

GNT est le portail Hi-Tech français consacré aux nouvelles technologies (internet, logiciel, matériel, mobilité, entreprise) et au jeu vidéo PC et consoles.

Schließen Sie die Sicherheitslücken von CUPS richtig, um Ihr Linux-System vor Angriffen über Drucker zu schützen.

Having fun with a Zero-Day vulnerability

One of the most infamous vulnerabilities from 2021 is known as “Print Nightmare.” This is a remote code execution vulnerability which means it allows an attacker to execute code on a se…

Introduction: In the cat-and-mouse game of enterprise security, legacy services often become the Achilles' heel of modern infrastructure. The Windows Print Spooler service, a staple of network printing since the 1990s, has recently been exposed as a vector for complete domain compromise. Attackers are weaponizing the `PrintNightmare` vulnerability (CVE-2021-1675 and CVE-2021-34527) to execute arbitrary code with SYSTEM privileges, moving laterally through networks with terrifying efficiency.

Introduction: A newly disclosed critical vulnerability in the Windows Print Spooler service (CVE-2024-12345) allows unauthenticated remote attackers to execute arbitrary code with SYSTEM privileges on affected systems. This flaw, similar to previous PrintNightmare variants, impacts all supported versions of Windows and is being actively exploited in the wild. Understanding how to detect vulnerable configurations, apply temporary mitigations, and ultimately patch the vulnerability is essential for security teams to prevent domain compromise and data breaches.