Search: “netlogon”

125 stories

Kaspersky SecurelistSep 25, 10:00 UTC · Sep 25, 2024Ransomware

Twelve: from initial compromise to ransomware and wipers

Kaspersky SecurelistSep 20, 13:33 UTC · Sep 20, 2024Ransomware CVE-2021-21972 CVE-2021-22005

Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)

Help Net SecurityJun 1, 00:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2026-410891

Microsoft Netlogon exploitation continues to rise

Cisco TalosSep 28, 23:19 UTC · Sep 28, 2020Vulnerability in the wildCVE-2020-1472

Samba addresses the CVE-2020

Security AffairsSep 23, 14:34 UTC · Sep 23, 2020Vulnerability CVE-2020-1472

Zerologon attack lets hackers to compromise a Windows domain

Security AffairsSep 14, 11:48 UTC · Sep 14, 2020Ransomware CVE-2020-1472

2026-007: Critical Vulnerability in Windows Netlogon

Actively exploited CVSS 9.8 Windows Netlogon flaw lets unauthenticated attackers execute code with SYSTEM privileges on domain controllers.

Microsoft's May 2026 advisory describes CVE-2026-41089, a stack-based buffer overflow in Windows Netlogon (CVSS 9.8) that allows unauthenticated remote code execution with SYSTEM privileges on domain controllers via specially crafted packets. The Centre for Cybersecurity Belgium reports the flaw is currently being exploited by threat actors. All Windows Server versions from 2012 through 2025 acting as domain controllers are affected and require the May updates.

CERT-EU AdvisoriesSep 8, 15:13 UTC · 7d agoExploit / PoC in the wildCVE-2026-410891

Accessing the MS-NRPC interface as the RPC client without authentication

Kaspersky SecurelistApr 4, 10:00 UTC · Apr 4, 2025Tools1

After researchers test Microsoft Netlogon exploit, feds tell users to patch now or suffer later

CyberScoopSep 15, 13:38 UTC · Sep 15, 2020Vulnerability

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2025-54518 CVE-2026-41096 CVE-2026-42826+14 CVEs1

CISA orders agencies to quickly patch critical Netlogon bug

CyberScoopSep 21, 21:50 UTC · Sep 21, 2020Vulnerability in the wild

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Cisco TalosMar 17, 11:58 UTC · Mar 17, 2022Ransomware

Threat actors are actively exploiting Zerologon flaw, Microsoft warns

Security AffairsOct 30, 08:25 UTC · Oct 30, 2020Threat actor CVE-2020-1472

APT groups chain VPN and Windows Zerologon bugs to attack US government networks

Security AffairsOct 12, 11:29 UTC · Oct 12, 2020Threat actor CVE-2020-1472 CVE-2018-13379 CVE-2020-1631+3 CVEs

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMay 13, 15:34 UTC · May 13, 2026Vulnerability in the wildCVE-2026-32161 CVE-2026-33109 CVE-2026-33844+22 CVEs

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

Help Net SecurityMay 12, 00:00 UTC · May 12, 2026Vulnerability in the wildCVE-2026-40361 CVE-2026-40364 CVE-2026-41089+2 CVEs

Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack

The Hacker NewsApr 22, 10:55 UTC · Apr 22, 2026Malware

Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities

Cisco TalosJun 10, 21:45 UTC · Jun 10, 2025Vulnerability in the wildCVE-2025-32717 CVE-2025-32710 CVE-2025-29828+11 CVEs

July 2023 Patch Tuesday forecast: A month of instability and uncertainty

Help Net SecurityJul 11, 19:22 UTC · Jul 11, 2023Vulnerability CVE-2022-37967 CVE-2022-38023 CVE-2023-32434+3 CVEs1

Microsoft Patch Tuesday, February 2021 Edition

Krebs on SecurityFeb 9, 23:54 UTC · Feb 9, 2021Vulnerability in the wildCVE-2021-1732 CVE-2021-24078 CVE-2020-1472+1 CVEs1

Taiwanese vendor QNAP issues advisory on Zerologon flaw

Security AffairsOct 22, 13:10 UTC · Oct 22, 2020Advisory CVE-2020-1472

NSA details top 25 flaws exploited by China

Security AffairsOct 20, 19:28 UTC · Oct 20, 2020Exploit / PoC CVE-2019-11510 CVE-2020-5902 CVE-2019-19781+22 CVEs

Russian Cybercrime group is exploiting Zerologon flaw, Microsoft warns

Security AffairsOct 10, 17:42 UTC · Oct 10, 2020Ransomware CVE-2020-1472

Threat Source newsletter for Oct. 8, 2020

Cisco TalosOct 8, 18:00 UTC · Oct 8, 2020Ransomware in the wildCVE-2020-1472 CVE-2020-3421 CVE-2020-3480

Iran-linked APT is exploiting the Zerologon flaw in attacks

Security AffairsOct 6, 07:41 UTC · Oct 6, 2020Exploit / PoC in the wildCVE-2020-1472 CVE-2019-0604

Threat Source newsletter for Oct. 1, 2020

Cisco TalosOct 1, 18:00 UTC · Oct 1, 2020Vulnerability in the wildCVE-2020-1472 CVE-2020-3421 CVE-2020-3480

LIVE Webinar on Zerologon Vulnerability: Technical Analysis and Detection

The Hacker NewsSep 29, 17:26 UTC · Sep 29, 2020Vulnerability CVE-2020-1472

Detecting and Preventing Critical ZeroLogon Windows Server Vulnerability

The Hacker NewsSep 23, 18:09 UTC · Sep 23, 2020Vulnerability in the wildCVE-2020-1472

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 6d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs