The NSA issued an urgent warning about a critical vulnerability appearing in Windows servers
The US government is facing a huge problem related to server security. The US Department of Homeland Security (CISA) Cybersecurity and Infrastructure Agency (CISA) has issued an emergency directive calling for government agencies to install patches for 'critical' Windows Server security vulnerabilities. 'is called Zerologon.
Zerologon is a vulnerability that exists in the cryptographic authentication scheme used by the Netlogon Remote Protocol. If abused, it can pave the way for an attacker to impersonate any computer, including the Domain Controller itself, and then gain access to Active Directory services on the network without having to. log in, as well as make remote procedure calls.
More specifically, by forging an authentication token for a particular Netlogon function, an attacker can call a function that sets the Domain Controller's password to a known value. They can then use this new password to gain control of the Domain Controller and steal the domain administrator's credentials.
CISA is currently warning of serious consequences, the availability of 'in the wild' exploits, and the sheer popularity of vulnerable Windows servers acting as Domain Controllers. Basically, Zerologon affects systems running Windows Server 2008 R2 or higher, including recent systems using Windows 10 based Server editions.
Emergency directive 20-04 has been issued by CISA, instructing federal civil authorities to apply the August 2020 Windows Servers security update (August 2020 security update - CVE-2020-1472) Microsoft is for all Domain Controllers. Patch installation must be done in September.
Although the CISA warning is issued to US government agencies, it is essentially the same warning for private companies that depend on Windows servers and Active Directory.
If the intruder successfully exploits this vulnerability, they will have the right to control the network effectively, thereby spreading malware, stealing data or causing serious problems. Many companies have suffered huge damage from malware this year, and that trend may continue if they fail to protect themselves against risks like Zerologon in time.
You should read it
- 'Printer Catastrophe' Vulnerability Threatens All Versions of Windows
- Microsoft fixes a serious vulnerability that has existed for 17 years in Windows Server
- Windows Server January Update causes Netlogon error
- Exploit code released puts Windows 10 20H2 and Windows Server 20H2 at risk
- Warning: Vulnerability in Windows' HTTP Protocol Stack attacks remote code execution, no authentication required
- Microsoft has patched the critical vulnerability on Android Remote Desktop application
- How to install Active Directory on Windows Server 2019
- Microsoft has released a critical update for Windows 10, users need to update now
- New zero-day vulnerability warning in Windows Search, Windows protocol nightmare getting worse
- Immediately patch CWP vulnerability that allows code execution as root on Linux servers
- Theory - What is Active Directory?
- Apple releases iOS 14.4.2, iOS 12.5.2, and watchOS 7.3.3 updates that patch the critical zero-day vulnerability
Maybe you are interested
Why should you buy a MacBook instead of a Snapdragon X Elite Windows laptop?
How to set up a secure guest account on a Windows computer
How to Enable and Disable Tabs in File Explorer on Windows 11
5 macOS Sequoia Features Not Available on Windows 11
Why does Windows operating system have such a bad reputation?
Quickly fix Unmountable Boot Volume error on Windows 10/11