Microsoft Addresses Shadow Brokers Exploits

On April 14, 2017, a group known as Shadow Brokers publicly released a large set of exploitation tools for known Microsoft vulnerabilities. These tools may pose a critical threat to personal and organizational systems. The Microsoft Security Response Center (MSRC) has published information on their investigation into Shadow Brokers tools and Microsoft's solutions to known Shadow Brokers exploits.

Users and administrators are reminded that software no longer supported by Microsoft (also known as end-of-life (EOL) software) is particularly at risk for exploitation. US-CERT recommends retiring EOL products. For more information on EOL Microsoft products, see US-CERT Alerts TA14-310A and TA14-069A, and US-CERT Current Activity on Windows Vista.

US-CERT encourages users and administrators to review the MSRC post and apply any necessary updates.