Skip to content

// #network-segmentation

2 articles

← All tags
🌐 Network

Gentlemen Ransomware Worm: Using Network Segmentation to Contain Propagation Before Detection

The confirmed worm capability in the Gentlemen ransomware payload — propagating via SMB exploitation and credential reuse — changes the containment calculus for enterprise incident response. Effective network segmentation stops worm propagation at VLAN boundaries. This guide maps the segmentation controls that constrain Gentlemen's lateral movement.

#gentlemen-ransomware +8
🔑 IAM

Domain Controller Hardening After Netlogon CVE-2026-41089: Reducing the Attack Surface Beyond Patching

Patching CVE-2026-41089 closes the specific vulnerability, but domain controllers remain highly targeted infrastructure. This guide covers the access control, network segmentation, and monitoring controls that reduce DC attack surface against the class of unauthenticated RCE threats that Netlogon represents.

#domain-controller +7

Commentary tagged #network-segmentation

Opinion

Netlogon Will Be Exploited Again. The Question Is Whether Your Architecture Has Changed Since Zerologon.

CVE-2026-41089 is the third significant Netlogon vulnerability with active exploitation in six years. Zerologon (CVE-2020-1472) prompted an industry-wide reckoning with domain controller exposure. If your DC network architecture has not materially changed since 2020, the reckoning was incomplete.

CipherWatch Editorial

Security Intelligence Platform