Zerologon Enforcement Mode

Zerologon Enforcement Mode

The Netlogon distant code execution vulnerability, disclosed final August, has been weaponized by APT teams.Microsoft has launched part two mitigation for the important Zerologon vulnerability disclosed in August 2020. CVE-2020-1472…
Windows Zero Logon Enforcement

Windows Zero Logon Enforcement

By Feb 2021 Patch Tuesday Microsoft will allow Domain Controller “enforcement mode” by default to handle CVE-2020-1472. Microsoft is having issues when it arrives to providers that haven’t still up-to-date…

Sopra Steria …. Ryuked.. Services down

IT services provider Sopra Steria has confirmed that it was hit by a “new version” of the Ryuk ransomware that was “previously unknown to antivirus software providers and security agencies”.…

Zerologon ! Goes Wild

Threat actors are activly exploiting the Windows Server Zerologon vulnerability in recent attacks. Microsoft strongly recommends all Windows administrators to install the security updates.As part of the August 2020 Patch…

CVE 2020-1472 – Exploit goes wild

The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon. The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon…