Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

2 briefs RSS
critical threat

Active Exploitation of Windows IKE Extension RCE

CVE-2022-34721 is a critical remote code execution vulnerability in the Windows Internet Key Exchange (IKE) extension, which is being actively exploited in the wild to gain unauthorized code execution.

exploited Windows vulnerability remote-code-execution
2t 1c
critical advisory

Computer Account Changes via Anonymous Logon Detected

Detection of Windows Event 4742 indicating a computer account change performed by an ANONYMOUS LOGON account, which is abnormal and could signify malicious activity, particularly Zerologon exploitation.

PoC Splunk Enterprise +6 zerologon privilege-escalation windows
2r 1t 1c updated