SIGRed: Windows DNS Server Remote Code Execution | Check Point Research

Channel:
United States Check Point Software
Subscribers:
79,900
Published on ● Video Link: https://www.youtube.com/watch?v=PUlMmhD5it8


Duration: 0:33
32,896 views
100

Check Point Research recently discovered a critical vulnerability in the Windows DNS server that affects Windows Server 2003 to 2019, and can be triggered by a malicious DNS response. Due to the fact the service is running in elevated privileges (SYSTEM), if exploited successfully, an attacker would be granted Domain Administrator rights, effectively compromising the entire corporate infrastructure.
For more information visit: https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin:-exploiting-a-17-year-old-bug-in-windows-dns-servers/

Check Point Research on Facebook: facebook.com/CheckpointResearch
Check Point Research on Twitter: twitter.com/_CPResearch_
Check Point Research Podcast channel: research.checkpoint.com/category/cpradio/



Other Videos By Check Point Software


2020-07-21CheckMates Ask Me Anything with Dorit Dor | How Has COVID Changed Cyber Security?
2020-07-21Introducing Check Point IoT Security for Enterprise, Healthcare and Industrial
2020-07-20New 1570R Security Gateway: Protecting ICS and OT Networks from Cyber Attacks
2020-07-20How to Transform Your Branch Office Connectivity Through Cloud-Delivered Security Services
2020-07-20Microsoft Inspire: Welcome
2020-07-17Intro to CyberTalk.org, get cyber security insights, peer interview and resources.
2020-07-17What Every CISO Must Know for 2020 | Cyber Security Best Practices
2020-07-16Preventing IoT Cyber Attacks
2020-07-16Fixing the Zoom ‘Vanity Clause’ – Check Point and Zoom collaborate to fix Vanity URL issue
2020-07-15Check Point IoT Protect
2020-07-14SIGRed: Windows DNS Server Remote Code Execution | Check Point Research
2020-07-13Achieving SOC Certainty | Check Point Infinity SOC
2020-07-09Leveraging CloudGuard to Provide Managed SD-WAN Security
2020-07-08How Non-Integrated Solutions Challenge Overall Enterprise Security
2020-07-01Check Point Research Demo: Cyber Attack on Apache Guacamole
2020-07-01Check Point Infinity Total Protection Ensures The Protection of Sensitive Financial Data
2020-06-30The Evolution of the CISO Role | Cyber Talk Insights
2020-06-30Achieving SOC Certainty | Introducing Check Point Infinity SOC
2020-06-29Best Practices During a Cyber Pandemic | Webinar Featuring Motorola Mobility's CISO, Richard Rushing
2020-06-19Check Point Secures Your Critical Infrastructure | Watch the Webinar Replay
2020-06-19Secure Your Critical Infrastructure with the 1570R Security Gateway


Tags:
DNS server
Check Point Research
Windows Server 2003
dns