Netskope Threat Labs

OS-WINDOWS Microsoft Windows malicious Netlogon NetrServerAuthenticate3 request attempt

IPS-CFW

2 SIDs: 56290, 65030

First seen
November 2025
Last seen
January 2026

Detects an attempt to exploit CVE-2020-1472 and CVE-2025-33070, a known vulnerability that can compromise the target in Microsoft Windows malicious Netlogon NetrServerAuthenticate3 request.