New Vulnerability Advisory: How Tanium Can Help Find and Remediate “Zerologon” (CVE-2020-1472)

NOTE: This article was updated again on 10/16/20 to include the most recent information

​

Yesterday, a security company named Secura detailed how one could exploit CVE-2020-1472. Secura named the process “Zerologon” because it allows attackers to “logon” with zero credentials. An effective attack would give an attacker domain administrator privileges without needing to know a username and password.

This is now considered to be a critical vulnerability that should be fixed as soon as possible.

Below is information on how to find and remediate this vulnerability using Tanium.

Visibility

Interact

To find vulnerable systems you can run the Tanium question....

​

....Continue reading full article. No login or registration required.