Critical Windows Netlogon RCE flaw now exploited in attacks
Source Bleeping Computer
Mentioned vulnerabilities
Rated Critical by Threat Radar from the Bleeping Computer text
Data as of 1 Jun 2026, 21:57 UTC
What to do
AI-suggested
Microsoft released an official patch for CVE-2026-41089 during the May 2026 Patch Tuesday. Administrators are strongly urged to apply this update immediately to all affected Windows Server domain controllers. The Centre for Cybersecurity Belgium recommends urgent patching due to active exploitation. No alternative mitigations or workarounds have been detailed. Monitor vendor advisories for any further updates or guidance.
Description
The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical Windows Netlogon vulnerability in attacks. [...]