Cyber Risks · Cisco Talos

Threat Source newsletter for Sept. 24, 2020

Summary: Cisco Talos reported that exploit code for the Microsoft Netlogon vulnerability known as Zerologon, which scored a maximum 10.0 on CVSS when Microsoft disclosed it in August, began surfacing on GitHub. The newsletter also described Emotet returning after a few months of quiet to team with Trickbot on a phishing campaign using Word lures that ask users to enable macros to download the Trickbot loader.

What you should know: Zerologon carries a maximum 10.0 severity score and Microsoft's fix is only partially delivered, with a second portion still pending while public proof-of-concept code now circulates on GitHub.

Read the original at Cisco Talos ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026