Attackers Can Hijack Windows Domain Controllers with 'Zerologon' Vulnerability (CVE-2020-1472)

Researchers at Secura recently published a blog post along with a supporting whitepaper detailing their findings of a critical vulnerability in Netlogon they’ve dubbed ‘Zerologon.’ Identified as CVE-2020-1472, the vulnerability was patched back in August as part of Microsoft's August Patch Tuesday release. Exploitation of this flaw could lead to an attacker taking over a network’s Domain Controller.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.