CISA Issues Emergency Directive on Microsoft Print Spooler
Compliance Dental US CERT Vulnerabilities
CISA has issued Emergency Directive (ED) 21-04: Mitigate Windows Print Spooler Service Vulnerability addressing CVE-2021-34527. Attackers can exploit this vulnerability to remotely execute code with system level privileges enabling a threat actor to quickly compromise the entire identity infrastructure of a targeted organization. This directive requires Federal Agencies to comply but HIPAA covered entities like dental offices, should update their server's Group Policy to disable the Print Spooler on all domain controllers for security.