Zerologon bug is a perfect 10. Patch now or crash hard - TechBeacon

The moral of the story? Run—do not walk—to your AD domain controllers (metaphorically speaking). And start planning for February’s second shoe droppage.

A researcher found a really nasty bug in Windows Server, calling it #Zerologon. The #ActiveDirectory domain controller code screws up an important bit of #AES, earning a perfect 10 on the CVSS scale. https://t.co/DeOnCn2BNg

1/…

— @Richi Jennings (@RiCHi) September 17, 2020