--- title: "Alert: Update Windows Netlogon Remote Protocol Now, says Homeland Security - Blogs on IT Support and Cybersecurity for Small Business" description: "What’s the Exploit and Who Does It Affect? The vulnerability in the CISA’s emergency directive affects all supported Windows Server operating systems. It’s been named Zerologon, and If left unpatched, it could allow an unauthenticated threat actor to" url: "https://colemantechnologies.com/blog/alert-update-windows-netlogon-remote-protocol-now-says-homeland-security" date: "2026-06-07T04:02:21+00:00" language: "en-GB" --- ## Blogs on IT Support and Cybersecurity for Small Business Insights on cybersecurity, AI, and IT strategy to help business leaders reduce risk, improve performance, and make better technology decisions. [ Categories ](https://colemantechnologies.com/blog/categories "Categories") [ Tags ](https://colemantechnologies.com/blog/tags "Tags") [ Categories: All Categories ](https://colemantechnologies.com/javascript:void(0); "Categories") Search...Suggested keywords [ x ](https://colemantechnologies.com/javascript:void(0);) # Alert: Update Windows Netlogon Remote Protocol Now, says Homeland Security [Coleman Technologies Blog](https://colemantechnologies.com/blog/categories/blog) [Alerts](https://colemantechnologies.com/blog/categories/alerts) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) Monday, 21 September 2020 ## What’s the Exploit and Who Does It Affect? The vulnerability in the [CISA’s emergency directive](https://cyber.dhs.gov/ed/20-04/) affects all supported Windows Server operating systems. It’s been named **Zerologon**, and If left unpatched, it could allow an unauthenticated threat actor to gain access to a domain controller and completely compromise your network’s Active Directory services. The vulnerability gets its name because all the hacker has to do is send a series of Netlogon messages with the input fields filled with zeroes to gain access. Once in, this essentially gives the hacker a lot of control over your network, and it’s a publicly available exploit (since Microsoft has released a patch for it) which means cybercriminals will be taking advantage of it. The attacker doesn’t need any user credentials to use this exploit. If your business network is running Windows Server, you need to have updates applied to your servers to ensure that this vulnerability is patched. If you aren’t actively keeping all the devices on your network maintained with the latest updates and security patches, you are essentially leaving the front door wide open. The Department of Homeland Security (the parent department of the CISA), has issued a directive for all government agencies in the United States that they have until **today (September 21st)** to apply the patch, to prevent giving hackers control over federal networks. This means **all state and local government agencies are required to apply this today and**[ **report back to the CISA**](https://cyber.dhs.gov/ed/20-04/)**.** Not having this patch installed will also affect other compliance standards throughout other industries, and of course, leave your business and your data at high-risk of a breach. It is highly recommended to apply this patch today, as soon as possible, regardless of the industry you are in. We can’t stress this enough. **Apply this patch as soon as humanly possible.** ## The Good News If you have an active managed [IT services](https://www.colemantechnologies.com/it-services/ "IT services") agreement with COMPANYNAME that covers the maintenance of your Windows Servers, you have likely already received the patch, or will be having it installed today. The patch was released by Microsoft as part of their August 2020 Patch Tuesday Update. If you don’t have an agreement with us, or you aren’t sure if your agreement covers fixing the Zerologon vulnerability, we urge you to reach out to us by calling PHONENUMBER. This is definitely not something you want to risk. The Department of Homeland Security and the US Cybersecurity and Infrastructure Security Agency don’t issue emergency directives casually. This needs to be taken seriously for all businesses and organizations. If you need help, or you are unsure about how to protect your organization from the Zerologon vulnerability, don’t hesitate to reach out to COMPANYNAME at PHONENUMBER. [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) Tags: [Compliance](https://colemantechnologies.com/blog/tags/compliance) [Network Security](https://colemantechnologies.com/blog/tags/network-security) [Security](https://colemantechnologies.com/blog/tags/security) [×](https://colemantechnologies.com/javascript:void(0);) Stay Informed When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them. Your Name E-mail Address [ Simple Tasks to Improve Cybersecurity ](https://colemantechnologies.com/newsletter-content/simple-tasks-to-improve-cybersecurity) [ Are Developers Going to Eliminate the Password? ](https://colemantechnologies.com/blog/are-developers-going-to-eliminate-the-password) About the author [ ![Coleman Technologies Admin](https://colemantechnologies.com/media/com_easyblog/images/avatars/author.png) ](https://colemantechnologies.com/blog/blogger/darren-coleman) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) [ ](https://colemantechnologies.com/blog/blogger/darren-coleman) Author's recent posts [More posts from author](https://colemantechnologies.com/blog/blogger/darren-coleman) [ Tuesday, 05 May 2026 Darren Coleman Featured in Boss Today on AI Literacy and Human Judgment ](https://colemantechnologies.com/blog/darren-coleman-bosstoday-ai-literacy) [ Monday, 06 April 2026 How Cloud IT Services Are Transforming Business Continuity ](https://colemantechnologies.com/blog/how-cloud-it-services-are-transforming-business-continuity) [ Monday, 06 April 2026 Darren Coleman Featured in USAWire on Why Businesses Need an AI Strategy ](https://colemantechnologies.com/news-a-events/darren-coleman-usawire-ai-strategy) ## Schema ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://colemantechnologies.com" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://colemantechnologies.com/blog" }, { "@type": "ListItem", "position": 3, "name": "Coleman Technologies Admin", "item": "https://colemantechnologies.com/blog/blogger/darren-coleman" }, { "@type": "ListItem", "position": 4, "name": "Alert: Update Windows Netlogon Remote Protocol Now, says Homeland Security", "item": "https://colemantechnologies.com/blog/alert-update-windows-netlogon-remote-protocol-now-says-homeland-security" } ] } ```