<img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=1354242&amp;fmt=gif">

What is an SMB vulnerability?

SMB Overview

Server Message Block (SMB) is a Microsoft network file sharing protocol. Leaving an SMB service open to the public can give attackers the ability to access data on your clients’ internal network, and increases their risk of a ransomware attack or other exploit. Notably, SMB1 (a legacy version of the service) was used as an attack channel for both the WannaCry and NotPetya mass ransomware attacks in 2017. Server Message Block (SMB) allows devices on the same network to share files with each other. Printers, mail servers, and high-priority internal network segments use SMB to provide access to remote users.

If this protocol is identified as unsecured on a policyholder's IT system, this triggers an alert from Corvus. Click here to learn about dynamic security alerts.  

Best Practices for Securing SMB

Properly securing SMB services is the ideal resolution. We recommend that your clients take the following steps to address their SMB vulnerability.  

  1. Work with their IT team to investigate the vulnerability

  2. Assess the version of SMB used. Best practices recommend:

    • Disabling SMBv1 and
    • Blocking all versions of SMB at the network boundary (more information on this here)

Recent Articles

Social Engineering Outgrows the Inbox


Social engineering attacks remain one of the most common ways threat actors gain initial access to an organization’s systems. Learn more in this article.

Q1 '25 Travelers' Cyber Threat Report: Record Attack Activity


Ransomware surged in Q1 with 2,200+ victims—a 35% jump from last quarter. Get the full story in our latest report. Download now.

Best Practices for Managing Cyber Risks in Open-Source Software


Discover key strategies to mitigate cybersecurity risks in open-source software such as vetting standards, compliance, and the role of cyber insurance.