Microsoft Issues Updated Patching Directions News Today : Breaking News, Live Updates & Top Stories | Vimarsana

A first phase patch for the critical vulnerability, tracked as CVE-2020-1472, was issued in August 2020. "The first phase of the patch was intended to address the vulnerability on two fronts: blocking both Windows-based domain members and non-Windows PCs that have been configured to disable signing/encryption as well as making changes to the Netlogon protocol for clients that cannot use the required signing/encryption," says Satnam Narang, staff research engineer at the security firm Tenable. The second patch completes the patching process for those who did not earlier implement enforcement ...

Guarding Against Vulnerability While Microsoft issued a patch for the Zerologon flaw in August 2020, it's not clear if all the company's customers have applied it to their networks to address the vulnerability. So, Microsoft will begin enabling domain controller enforcement mode by default, according to the company alert. "This will block vulnerable connections from non-compliant devices," Microsoft says. "Domain controller enforcement mode requires that all Windows and non-Windows devices use secure [remote procedure call] with Netlogon secure channel unless customers have explicitly allowed...