Tag

zerologon

Safeguard articles tagged "zerologon" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Zerologon: The Netlogon Cryptographic Flaw (CVE-2020-1472) Explained

CVE-2020-1472 let an unauthenticated attacker seize a domain controller in seconds by exploiting an all-zero AES-CFB8 initialization vector. Here's the real mechanism and the fix.

Jul 2, 20266 min read