Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Recent reports highlight the exploitation of CVE-2020-1472 and CVE-2022-48474/CVE-2022-48475 vulnerabilities. CVE-2020-1472, affecting domain controllers, allows attackers to perform DCSync operations, potentially compromising entire networks. CVE-2022-48474 and CVE-2022-48475 are DoS vulnerabilitie...
German researchers have discovered a new vulnerability named Onelogon, which exploits the previously patched Zerologon flaw (CVE-2020-1472) in Microsoft's Active Directory. The Onelogon attack can be executed using two methods: a 24-bit brute force attack requiring a low-privilege account, and a mee...
The 2026 Gartner Market Guide for Managed Detection and Response (MDR) highlights a shift in buyer expectations, emphasizing the need for integrated threat detection and proactive risk management. Organizations now seek MDR services that extend beyond simple alerting to include incident investigatio...
In 2024, over 40,000 CVEs were published, creating a significant challenge for security teams managing vulnerabilities. Organizations often treat vulnerability data as a compliance task rather than a strategic asset, which can lead to missed opportunities for preventing attacks. Effective prioritiza...
