News Wrap: BlueKeep Threats and Biometrics Data Breaches

Published: Aug. 16, 2019, 6:43 p.m.

On the heels of Black Hat USA 2019 and DEF CON, Threatpost editors break down the biggest news of this past week ended Aug. 16, from Patch Tuesday craziness to publicly-exposed databases. That includes:

  • Microsoft's August Patch Tuesday releasefeaturing four BlueKeep-like critical remote code-execution vulnerabilities in Remote Desktop Services (RDS) and a critical RCE flaw in Microsoft Word.
  • The personal and biometrics data of more than a million people left publicly exposedon a database owned by Suprema, a biometric security company.
  • Hacking conference organizer DEF CON Communicationssaid it plans to roll out a global anonymous bug submission platform based on the SecureDrop communications tool.