It’s been a long summer of vulnerabilities. First there was PrintNightmare. Then there was SeriousSAM. Then, PetitPotam.
If you were at Black Hat, you may have seen our popular shirts sporting the same slogan. We had an overwhelming amount of demand for those shirts, and wanted to share the popular design with more people.
We’ve minted 10,000 free Blumira POAPs that will be available on a first-come, first-served basis.
POAP (Proof of Attendance Protocol) is a digital collectible that allows you to keep long-lasting records of your experiences. Created as an NFT and powered by blockchain technology, each POAP is completely unique, which means that you have one-of-a-kind memorabilia from each individual event that you’ve attended.
You can claim a free POAP until we run out of the limited supply. Simply fill out the form below and we’ll email your own commemorative POAP within the next 48 hours.
Print Spooler is a built-in Windows service that manages print jobs. It’s been around since the 90s, and comes with a long history of bugs and vulnerabilities. In May 2020, Microsoft patched CVE-2020-1048 (aka PrintDemon), a vulnerability in Print Spooler that enabled attackers to write arbitrary data to any file on the system.
Then in July 2021, proof-of-concept exploit code was published for multiple vulnerabilities, one of which enabled remote code execution (RCE) that allowed threat actors to take full control of a Windows system.
The incident, dubbed PrintNightmare by members of the cybersecurity community, was a month-long hurdle for security administrators who were forced to contend with multiple Microsoft patches that did not fully fix the vulnerability. To learn more about PrintNightmare, read our blog post.
In response to PrintNightmare, Blumira’s security team created and published detections that allow you to monitor and identify suspicious behavior indicative of a Print Spooler exploit.
And of course, “I Pity The Fool” refers to Mr. T’s iconic catchphrase from Rocky III.
Blumira’s cloud SIEM helps teams protect against incidents like PrintNightmare, HiveNightmare, and PetitPotam by identifying behaviors closely associated with the vulnerabilities. Blumira’s security team works quickly to develop rules that are then built into the threat detection and response platform based on Blumira’s own verified lab research.
Blumira’s security experts also include recommendations when a finding is detected. During the PrintNightmare saga specifically, Blumira’s content and security teams covered the vulnerability comprehensively and quickly, providing remediation recommendations via blog posts and informative livestreams to fill in Microsoft’s communication gaps.