Top all-time · #6959
secura.com
Company blog · secura.com/blogsecuritysystems
secura.com is the company blog at secura.com, writing about security and systems. Since 2020, 11 different Hacker News readers have linked it 11 times, most often “Zerologon: Instantly become domain admin by subverting Netlogon cryptography”. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Secura's security research posts, mainly on the ZeroLogon vulnerability (CVE-2020-1472) and TPM sniffing attacks, cited as sources or support in discussions of those issues.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Bureau Veritas Cybersecurity is your trusted partner in cybersecurity. From employee awareness to process compliance and the cyber resilience of your technology. Bureau Veritas Cybersecurity is the cornerstone of Bureau Veritas’ cybersecurity strategy.
Most-linked posts?
- Zerologon: Instantly become domain admin by subverting Netlogon cryptography7 people · 7 mentions · first linked 2020-09-14
- Unauthenticated domain controller compromise by subverting Netlogon cryptography2 people · 2 mentions · first linked 2020-09-15
- TPM sniffing attacks on non-Bitlocker targets [re: LUKS FDE with discrete TPM]2 people · 2 mentions · first linked 2022-06-15
What Hacker News says?
Whitepaper for CVE-2020-1472: https://www.secura.com/pathtoimg.php?id=2055 [PDF]
Comment linking /pathtoimg.php?id=2055
on “Windows Server vulnerability requires immediate attention”Submitted Zerologon: Instantly become domain admin by subverting Netlogon cryptography as a story · 6 points
HN discussionI would be very careful with placing my trust in TPM: https://www.secura.com/blog/tpm-sniffing-attacks-against-non... .
Comment linking /blog/tpm-sniffing-attacks-against-non-bitlocker-targets
on “VeraCrypt: Free, open source, disk encryption for Windows, Mac OS X, Linux”Submitted Zerologon: Instantly become domain admin by subverting Netlogon cryptography as a story · 4 points
HN discussionhttps://www.reddit.com/r/netsec/comments/iyoovi/zerologoncve... https://media.cert.europa.eu/static/SecurityAdvisories/2020/... https://www.cert.ssi.gouv.fr/alerte/CERTFR-2020-ALE-020/ https://www.bsi.bund.de/DE/Presse/Kurzmeldungen/Meldungen/Ze... https://www.secura.com/blog/zero-logon https://www.darkreading.com/vulnerabilities---threats/6-thin...
Comment linking /blog/zero-logon
on “ZeroLogon(CVE-2020-1472) – Attacking and Defending”Submitted Zerologon: Instantly become domain admin by subverting Netlogon cryptography as a story · 4 points
HN discussionSubmitted TPM sniffing attacks on non-Bitlocker targets [re: LUKS FDE with discrete TPM] as a story · 2 points
HN discussionSubmitted Zerologon: Instantly become domain admin (CVE-2020-1472) as a story · 2 points
HN discussionSubmitted Zerologon: Become domain admin by subverting Netlogon cryptography as a story · 1 points
HN discussionSubmitted Zerologon: Instantly become domain admin by subverting Netlogon cryptography as a story · 1 points
HN discussionSubmitted Unauthenticated domain controller compromise by subverting Netlogon cryptography as a story · 1 points
HN discussion
