EternalBlue
A zero-day exploit weapon stockpiled by the NSA that was leaked in 2017 and subsequently used in the WannaCry ransomware attack, causing system outages across more than 150 countries. It is regarded as a landmark event illustrating the dangers of zero-day vulnerability hoarding.
Core Facts
WannaCry exploited the EternalBlue vulnerability leaked from the NSA in 2017, causing infections in more than 200 countries and regions worldwide.
In 2017, the WannaCry ransomware exploited EternalBlue, a Windows vulnerability tool secretly stockpiled by the NSA that had been leaked
Timeline (last 90 days)
EternalBlue (MS17-010) was still being exploited at scale by WannaCry months after the patch was released, showing that in practice the patch gap is often measured in months rather than days.
WannaCry exploited the EternalBlue vulnerability leaked from the NSA in 2017, causing infections in more than 200 countries and regions worldwide.
In 2017, the WannaCry ransomware exploited EternalBlue, a Windows vulnerability tool secretly stockpiled by the NSA that had been leaked
All Facts (3)
WannaCry exploited the EternalBlue vulnerability leaked from the NSA in 2017, causing infections in more than 200 countries and regions worldwide.
65%VerifiedIn 2017, the WannaCry ransomware exploited EternalBlue, a Windows vulnerability tool secretly stockpiled by the NSA that had been leaked
75%UnverifiedEternalBlue (MS17-010) was still being exploited at scale by WannaCry months after the patch was released, showing that in practice the patch gap is often measured in months rather than days.
50%