STOP AND PATCH ASAP: Zerologon Flaw Poses Unacceptable Risk CISA Says

Plus, TikTok is still owned by a Chinese firm but headed for Texas headquarters, Hackers retaliate against Belarusian police, Android users should update Firefox

The Department of Homeland Security’s CISA has issued an emergency directive ordering civilian agencies to immeditaley install a patch for a vulnerability known as Zerologon in Windows servers citing an “unacceptable risk” that the flaw entails. Microsoft issued a fix for the vulnerability in its August updates but many admins remained unaware of how just how bad the bug until researchers from Secura published a technical report last week. Catalin Cimpanu has the details over at ZDNet.

Related: The Register, HotHardware.com, HotHardware.com, SecurityWeek, ZDNet Security, Computer Business Review, Dark Reading, TechRepublic, IT Pro,  Infosecurity Magazine, SlashGear » security, Help Net Security, Cyberscoop, Engadget