{"id":37269,"date":"2020-09-22T21:49:14","date_gmt":"2020-09-22T21:49:14","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/"},"modified":"2020-09-22T21:49:14","modified_gmt":"2020-09-22T21:49:14","slug":"as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/","title":{"rendered":"As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba \u2013 it’s also affected"},"content":{"rendered":"
<\/div>\n

Administrators running Samba as their domain controllers should update their installations as the open-source software suffers from the same ZeroLogon hole as Microsoft’s Windows Server.<\/p>\n

An alert from the project<\/a> confirms its code, in certain configurations, is also vulnerable to the CVE-2020-1472<\/a> bug, which can be exploited to gain domain-level administrator access. The vulnerability lies in the design of Microsoft’s Netlogon Remote Protocol (MS-NRPC<\/a>), which Samba inherited as it supports the technology.<\/p>\n

According to the project’s Andrew Bartlett and Douglas Bagnall, whether or not you’re affected by the bug depends on your Samba version and settings. The default configuration in version 4.8 and higher protects against known exploits, we’re told:<\/p>\n

We’re told that Samba running as an Active Directory or classic NT4-style domain controller is at risk, and although file-server-only installations are not directly affected, “they may need configuration changes to continue to talk to domain controllers.”<\/p>\n

“File servers and domain members do not run the netlogon service in supported Samba versions and only need to ensure that they have not set ‘client schannel = no’ for continued operation against secured DCs such as Samba 4.8 and later and Windows DCs in 2021,” Bartlett and Bagnall added.<\/p>\n

“Users running Samba as a file server should still patch to ensure the server-side mitigations (banning certain un-random values) do not very rarely impact service.”<\/p>\n

The hole is addressed in Samba 4.10.18, 4.11.13, and 4.12.7. Setting schannel = yes<\/code> in the smb.conf file won’t necessarily protect you entirely, though. We’re told that, even in this case, there may still exist “a vulnerability against Samba despite being unable to access any privileged functionality.” The safest option is to update and enable secure netlogon channels. If your applications won’t work with schannel<\/code>, workarounds are offered.<\/p>\n

The update comes amid growing calls for sysadmins to check and patch their systems against CVE-2020-1472 due to the public release of exploit code for the security hole, and growing likelihood of in-the-wild attacks. The bug was addressed in Windows Server as part of Microsoft’s August Patch Tuesday bundle.<\/p>\n

Last week, Uncle Sam’s CISA took the rare step<\/a> of issuing a hard deadline for federal organizations to patch their systems against the flaw, notifying IT bods they had until the end of September 21 to make sure their domain controllers were up-to-date.<\/p>\n

\u201cThis attack has huge impact,” the cyber-security agency warned. “It basically allows any attacker on the local network (such as a malicious insider or someone who simply plugged a device to an on-premise network port) to completely compromise the Windows domain.\u201d \u00ae<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Domain controllers at risk of hijacking, depending on version and configuration Administrators running Samba as their domain controllers should update their installations as the open-source software suffers from the same ZeroLogon hole as Microsoft’s Windows Server.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":37270,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-37269","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nAs you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"As you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-22T21:49:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"650\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba \u2013 it’s also affected\",\"datePublished\":\"2020-09-22T21:49:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/\"},\"wordCount\":450,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/\",\"name\":\"As you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg\",\"datePublished\":\"2020-09-22T21:49:14+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/09\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg\",\"width\":650,\"height\":450},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba \u2013 it’s also affected\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"As you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/","og_locale":"en_US","og_type":"article","og_title":"As you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-09-22T21:49:14+00:00","og_image":[{"width":650,"height":450,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba \u2013 it’s also affected","datePublished":"2020-09-22T21:49:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/"},"wordCount":450,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/","url":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/","name":"As you're scrambling to patch the scary ZeroLogon hole in Windows Server, don't forget Samba \u2013 it's also affected 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg","datePublished":"2020-09-22T21:49:14+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/09\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected.jpg","width":650,"height":450},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/as-youre-scrambling-to-patch-the-scary-zerologon-hole-in-windows-server-dont-forget-samba-its-also-affected\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"As you’re scrambling to patch the scary ZeroLogon hole in Windows Server, don’t forget Samba \u2013 it’s also affected"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=37269"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37269\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/37270"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=37269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=37269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=37269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}