#cryptography

Analysis · May 20, 2026 · Colten Anderson

Zerologon: a crypto mistake that hands over the domain in seconds

CVE-2020-1472 is a cryptographic flaw in the Netlogon protocol that lets an unauthenticated attacker with network access to a domain controller reset its machine-account password to empty, becoming domain admin. CVSS 10, no credentials, seconds to exploit.