Sign In

Rueben Medina

Head of Security @ Elpha Secure | GIAC, CompTIA

Rueben Medina is a Security Engineer known for his passion for the human aspect of technology. He holds a Bachelor's degree in English from Emory University.

With a diverse professional background, Rueben has held roles such as Security Engineer at Ionic Security, Improviser at Dad's Garage Theatre Company, IT Support Professional II at Georgia Institute of Technology, RSPH IT Tier 1 Technician at Emory University, Cataloger at Turner Broadcasting, and Infocommons Assistant at Emory University.

Highlights

Aug 15 · linkedin

🚨NASTY EXPLOIT ALERT 🚨

❓What is it?

CVE-2024-38063, Microsoft has disclosed a 0-Click RCE (Remote Code Execution) vulnerability that affects ALL supported Windows and Windows Server editions.

🤔 What does it do?

An attacker can remotely exploit this vulnerability by sending specially crafted IPv6 packets to a target host. No user interaction is required, making this a “0-click” vulnerability. Only IPv6 packets can be abused to exploit this vulnerability.

🙄 Should I care?

Yes! While the exploit hasn't been observed in the wild Microsoft has rated the vulnerability as “Exploitation More Likely.” Once threat actors figure out how to use this exploit, it will spread very quickly. If your internet-facing Windows assets support IPv6, you're at risk.

🛠 Ok, how do I fix it?

Microsoft patched the vulnerability (along with a ton of others) in this month's Patch Tuesday on the 13th. If your Windows Updates are current, you should be good! If you cannot update for some reason, you can disable IPv6 on your vulnerable endpoints.

Jul 19 · linkedin

This morning, Crowdstrike released an update for the Falcon Sensor that is causing Windows to repeatedly crash. The current workaround to fix this is:

  1. Boot Windows into Safe Mode or the Windows Recovery Environment
  2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory
  3. Locate the file matching “C-00000291*.sys”, and delete it.
  4. Boot the host normally.

I'll reserve my snarky security commentary for later. Let's get people back up and running.

Related Questions

What is Rueben Medina's role at Mechanical Orchard?
How did Rueben Medina transition from security to infosec architecture?
What specific projects has Rueben Medina worked on at Elpha Secure?
What are Rueben Medina's key achievements in cybersecurity?
How does Rueben Medina approach cybersecurity training?
Rueben Medina
Rueben Medina, photo 1
Rueben Medina, photo 2
Add to my network

Location

Atlanta, Georgia, United States