Corvus Alerts - Explained
      Back to home
      1. Knowledge Nest
      2. For Policyholders
      3. Corvus Alerts - Explained

      What is a Bluekeep vulnerability?

      Learn more about Bluekeep, it's risks, and how to help your client properly secure their infrastructure.

      Bluekeep Overview

      BlueKeep is a critical vulnerability found in Microsoft server software called Remote Desktop Services. This vulnerability has the potential to be exploited by cybercriminals to launch ransomware, malware or other attacks.

      Best Practices for Securing Bluekeep

      Patching the affected systems is the ideal next step. We recommend that your clients take the following steps to address their Bluekeep vulnerability.  

      1. Work with their IT team to investigate the vulnerability 
      2. Patch the affected systems. If they are unable to install the updates that Microsoft has issued, they should implement appropriate mitigations: 
        • Enable Network Level Authentication (NLA) on systems running running supported editions of windows, OR
        • Block TCP port 3389 via enterprise perimeter firewall, OR 
        • Disable remote desktop services when they are not required
      3. Let Corvus know that the vulnerability has been resolved or mitigated by emailing services@corvusinsurance.com. We're also here to answer questions about how to resolve an issue.

      Learn more about Bluekeep