ZDNet: Proof-of-concept exploit code published for new Kerberos Bronze Bit attack
On December 10, NetSPI Security Consultant Jake Karnes was featured in ZDNet:
Proof-of-concept exploit code has been published this week for a new attack technique that can bypass the Kerberos authentication protocol in Windows environments and let intruders access sensitive network-connected services.
Named the Bronze Bit attack, or CVE-2020-17049, patching this bug caused quite the issue for Microsoft already.
The OS maker delivered an initial fix for Bronze Bit attacks in the November 2020 Patch Tuesday, but the patch caused authentication issues for Microsoft’s customers, and a new update had to be deployed this month to fix the previous issues.
On Wednesday, a day after Microsoft delivered the final patches, Jake Karnes, a security engineer at NetSPI, published a technical breakdown of the vulnerability so network defenders can understand how they are vulnerable and why they need to update, despite the patching process’ rocky start.
Read the full article here: https://www.zdnet.com/article/proof-of-concept-exploit-code-published-for-new-kerberos-bronze-bit-attack/
Explore more News
NetSPI Pioneers Continuous Asset Exposure Management with New External Attack Surface Management Solutions
NetSPI®, the proactive security solution, today introduced three tiers of external attack surface management (EASM) solutions, delivered through the The NetSPI Platform.
NetSPI Joins AWS ISV Accelerate Program
NetSPI, the proactive security solution, announced it has joined the Amazon Web Services (AWS) Independent Software Vendor (ISV) Accelerate Program.
NetSPI Names Caroline Japic as Chief Marketing Officer to Drive Next Phase of Growth and Expand Proactive Security Vision
NetSPI announced Caroline Japic joins its team as Chief Marketing Officer to amplify its vision for proactive security.