CVE-2017-0144: EternalBlue
What is EternalBlue?
A buffer overflow in Microsoft Windows SMBv1 protocol discovered by the NSA and leaked by the Shadow Brokers. Allows remote code execution on unpatched Windows systems via specially crafted SMB packets.
Impact & Exploitation
Powered the WannaCry ransomware attack (200,000+ systems in 150 countries) and NotPetya ($10B+ in damages). Used by multiple nation-state actors.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.