Just heard about a new vulnerability and am using the same format as the POODLE guy for this one.

  1. What is the Sandworm vulnerability?
  2. I use [product/browser]. Am I affected?
  3. Is [product] vulnerable to the Sandworm attack?
  4. What do I need to do to secure my [product] with respect to this vulnerability?
  5. How do I detect Sandworm attacks on my network?
  6. Are there any known Sandworm attacks?


  • Sandworm is not the name of the vulnerability. It's the name of a hacking campaign that happened to take advantage of CVE-2014-4114.
    – Xander
    Oct 16, 2014 at 15:54
  • @Xander Yes, I saw that also in the Symantec article, but as the story has spread, it has gained that name. At least the two emails I got from different security vendors mentioned it as "The Sandworm" Vulnerability. Also I heard there was a hacker named 4chan the got a bunch of celebrity pictures...
    – Red_Shadow
    Oct 16, 2014 at 16:05
  • Ha! Yes, that is quite true.
    – Xander
    Oct 16, 2014 at 16:18


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy