Microsoft Defender antivirus now able to detect ZeroLogon attacks – TechRadar

Microsoft has announced that its in-house antivirus tools are now able to detect ZeroLogon exploits. Microsoft Defender for Identity can now detect the vulnerability early on, allowing security teams to quickly identify where the attacks are coming from and whether or not they have been successful.
Vulnerability CVE-2020-1472, also known as ZeroLogon, affects Microsofts Netlogon Remote Protocol and has been given a 10 out of 10 rating for severity by the Common Vulnerability Scoring System. Although…

Click here to view the original article.