ZDNet: Proof-of-concept exploit code published for new Kerberos Bronze Bit attack
On December 10, NetSPI Security Consultant Jake Karnes was featured in ZDNet:
Proof-of-concept exploit code has been published this week for a new attack technique that can bypass the Kerberos authentication protocol in Windows environments and let intruders access sensitive network-connected services.
Named the Bronze Bit attack, or CVE-2020-17049, patching this bug caused quite the issue for Microsoft already.
The OS maker delivered an initial fix for Bronze Bit attacks in the November 2020 Patch Tuesday, but the patch caused authentication issues for Microsoft’s customers, and a new update had to be deployed this month to fix the previous issues.
On Wednesday, a day after Microsoft delivered the final patches, Jake Karnes, a security engineer at NetSPI, published a technical breakdown of the vulnerability so network defenders can understand how they are vulnerable and why they need to update, despite the patching process’ rocky start.
Read the full article here: https://www.zdnet.com/article/proof-of-concept-exploit-code-published-for-new-kerberos-bronze-bit-attack/
Explore More News
Forbes: Silverfort’s Launch Signals The Start Of Agentic AI Security Arms Race
Enterprises face new security challenges as autonomous AI agents integrate into workflows, prompting specialized solutions to combat risks today.
Forbes: Update Windows Now — Microsoft Confirms System Takeover Danger
Forbes covered Microsoft’s critical Windows vulnerabilities which can enable system takeover. The story included insight from NetSPI senior security consultant, Joshua Murrell.
NetSPI Named a Minnesota Top Workplace 2025 for Fifth Year in a Row
NetSPI earned a Top Workplaces 2025 award, the Star Tribune’s annual recognition of the best local companies, marking the fifth consecutive year NetSPI has received this prestigious honor.