Netlogon Remote Protocol News Today : Breaking News, Live Updates & Top Stories | Vimarsana

CVE-2020-1472 is a privilege escalation flaw that allows an attacker to take over an organization's domain controllers.

Windows 10, Server 2019 users must patch serious zero-day Another dangerous zero-day exploit is among 56 vulnerabilities patched by Microsoft in February’s Patch Tuesday update Share this item with your network: By Published: 10 Feb 2021 11:36 An elevation of privilege vulnerability in Microsoft Windows Win32k.sys, impacting Windows 10 and Windows Server 2019, is already being exploited in the wild as a zero-day, and should be prioritised for patching despite being rated as merely “important”, rather than “critical”. The vulnerability, CVE-2021-1732, requires an attacker to hav...

Guarding Against Vulnerability While Microsoft issued a patch for the Zerologon flaw in August 2020, it's not clear if all the company's customers have applied it to their networks to address the vulnerability. So, Microsoft will begin enabling domain controller enforcement mode by default, according to the company alert. "This will block vulnerable connections from non-compliant devices," Microsoft says. "Domain controller enforcement mode requires that all Windows and non-Windows devices use secure [remote procedure call] with Netlogon secure channel unless customers have explicitly allowed...