According to Microsoft, two bugs have been identified in Windows 10, one of which is a security issue. The first is essentially a Windows 10 bug that causes problems with USB printers. The second vulnerability, the wormable bug we discussed in the previous days, is related to the SMB component. This vulnerability is known as “External Darkness” and is already being exploited by hackers.
Windows 10: Bug affecting USB printers
According to a new status page from Microsoft, the issue occurs when a user disables or disconnects a USB printer after shutting down the computer. If the user tries to restart their system later, Windows 10 will not be able to detect the device or complete print jobs.
Additionally, the corresponding USB printer port (e.g. USB001) does not appear anywhere in the Windows printer settings. As a result, the system is unable to perform tasks related to that printer.
Specifically, Microsoft said: “If you connect a USB printer to a system running Windows 10 1903 or later and then shut down Windows and disconnect or turn off the printer, the USB printer port will not be available in the list of printer ports when you start Windows again.”
For now, Microsoft is suggesting that users connect the USB printer before booting Windowsuntil the issue is officially addressed.
As we said above, the bug is found in Windows 10 1903 and newer versions (even in the recently released version 2004).
“Eternal Darkness” or SMBGhost: Update systems immediately to stay safe!
A few days ago, the US Department of Homeland Security warned about a flaw in Windows 10 ( CVE-2020-0796 ), also known as SMBGhost or Eternal Darkness . According to CISA, hackers are already exploiting the flaw. SMBGhost is located in the SMB 3.1.1 (Block Message Server) protocol, which is used in Windows 10. If exploited successfully, an attacker could execute malicious code remotely .
Therefore, Windows 10 users should immediately install updates security and block SMB ports from the Internet using a strong firewall. Microsoft released an update in March, however, there are still vulnerable systems. Users who have installed newer updates (May) are safe.
