Using a WordPress flaw to leverage Zerologon vulnerability and attack companies’ Domain Controllers
Scientists found that attackers are employing a flaw in the File-Manager WordPress plugin (CVE-2020-25213) to leverage Zerologon (CVE-2020-1472) and attack companies’ Area Controllers.
