--- title: "Security Update: The US Cybersecurity and Infrastructure Agency Issues an Emergency Directive" description: Department of Homeland Security (DHS) Cybersecurity and Infrastructure Agency (CISA) has released Emergency Directive (ED) 20-04 addressing a critical vulnerability— CVE-2020-1472—affecting Microsoft Windows Netlogon Remote Protocol. An unauthenticated attacker with network access could exploit this vulnerability to compromise identity services on domain controller servers that permit network access. image: https://insights.bankonitusa.com/hubfs/Blog/boi-pattern-06.jpg --- Sales: [405-653-1920](tel:4056531920) 24/7/365 Support: [1-800-498-8877](tel:18004988877) [Client Portal](https://portal.bankonitusa.com/) [![BankOnITUSA](https://insights.bankonitusa.com/hubfs/BOI-Logo-SVG.svg "BankOnITUSA")](https://www.bankonitusa.com/) - [About](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) - [Solutions](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Acheive Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) - [Client Stories](https://www.bankonitusa.com/client-stories/) - [Saint Louis Bank](https://www.bankonitusa.com/client-stories/saint-louis-bank/) - [Commercial National Bank of Texarkana](https://www.bankonitusa.com/client-stories/commercial-national-bank-of-texarkana/) - [Watermark Bank](https://www.bankonitusa.com/client-stories/watermark-bank/) - [Integrity Bank & Trust](https://www.bankonitusa.com/client-stories/integrity-bank-and-trust/) - [Valliance Bank](https://www.bankonitusa.com/client-stories/valliance-bank/) - [First National Bank of Oklahoma](https://www.bankonitusa.com/client-stories/first-national-bank-of-oklahoma/) - [Lisle Savings Bank](https://www.bankonitusa.com/client-stories/lisle-savings-bank/) - [Bank of Prairie Villiage](https://www.bankonitusa.com/client-stories/bank-of-prairie-village/) - [Insights](https://insights.bankonitusa.com/) - [Billion $ Playbook](https://www.bankonitusa.com/billion-playbook/) - [Careers](https://www.bankonitusa.com/careers/) [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) Nov 10, 2025 # [Information Security Brief - November 2025](https://insights.bankonitusa.com/information-security-brief-november-2025) This Email is Making Me FEEL Something Scammers manipulate your emotions! IS AN EMAIL, TEXT, OR DM MAKING YOU FEEL SUDDEN, URGENT EMOTIONS? “You won o... [Read More](https://insights.bankonitusa.com/information-security-brief-november-2025) - - - - [mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fsecurity-update-the-us-cybersecurity-and-infrastructure-agency-issues-an-emergency-directive](mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fsecurity-update-the-us-cybersecurity-and-infrastructure-agency-issues-an-emergency-directive) [← Return to Blog](https://insights.bankonitusa.com) 25 Sep, 2020 ## Security Update: The US Cybersecurity and Infrastructure Agency Issues an Emergency Directive ### Risk Summary Department of Homeland Security (DHS) Cybersecurity and Infrastructure Agency (CISA) has released Emergency Directive (ED) 20-04 addressing a critical vulnerability— CVE-2020-1472—affecting Microsoft Windows Netlogon Remote Protocol. An unauthenticated attacker with network access could exploit this vulnerability to compromise identity services on domain controller servers that permit network access. CISA has determined that this vulnerability poses an unacceptable risk to the Federal Civilian Executive Branch and requires an immediate and emergency action for Federal government departments and agencies to apply the Microsoft released patch to mitigate the vulnerability. CISA also strongly recommends state and local governments, the private sector, and others patch this critical vulnerability as soon as possible. ### Regulatory Impact Federal banking regulators may provide guidance to regulated financial institutions in the coming days regarding the CISA directive. ### Action Taken by BankOnIT The August 2020 Microsoft Security Update patch mitigates this exploit. BankOnIT previously applied this update to affected servers on BankOnIT’s network and on BankOnIT managed client financial institution servers. This patch, along with every patch BankOnIT manages, is documented in each BankOnIT’s Client Management Console patch management report. ### Action Required by Your Financial Institution BankOnIT strongly encourages client institutions to document a response to this vulnerability by reviewing and retaining this Security Update and including it in your institution’s regular Information Technology Committee Meeting minutes or other reporting structure the bank has for Information Technology. Additionally, management and board reporting provided in BankOnIT’s Client Management Console should continue to be part of the information provided to IT committee meetings and board meetings. ### Additional Resources For more information and technical details about this critical vulnerability see the following sites: [US Cybersecurity & Infrastructure Agency - CISA Releases Emergency Directive on Microsoft Windows Netlogon Remote Protocol](https://us-cert.cisa.gov/ncas/current-activity/2020/09/18/cisa-releases-emergency-directive-microsoft-windows-netlogon) [US Department of Homeland Security - Mitigate Netlogon Elevation of Privilege Vulnerability from August 2020 Patch Tuesday](https://cyber.dhs.gov/ed/20-04/) [Microsoft - Netlogon Elevation of Privilege Vulnerability](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1472) [← Return to Blog](https://insights.bankonitusa.com) ##### Disclaimer This publication attempts to provide timely and accurate information concerning the subjects discussed. It is furnished with the understanding that it does not provide legal or other professional services. If legal or other expert assistance is required, the services of a qualified professional should be obtained. ### Search ### Subscribe Here! You'll receive our latest updates in your inbox. ### Posts by Tag - [Cybersecurity (52)](https://insights.bankonitusa.com/tag/cybersecurity) - [Reduce Risk (49)](https://insights.bankonitusa.com/tag/reduce-risk) - [Information Security Brief (36)](https://insights.bankonitusa.com/tag/information-security-brief) - [Information Technology for Banking Leaders (15)](https://insights.bankonitusa.com/tag/information-technology-for-banking-leaders) - [Achieve Operational Efficiency (13)](https://insights.bankonitusa.com/tag/achieve-operational-efficiency) - [Strategy (11)](https://insights.bankonitusa.com/tag/strategy) - [CEO Update (9)](https://insights.bankonitusa.com/tag/ceo-update) - [Gain Competitive Advantage (9)](https://insights.bankonitusa.com/tag/gain-competitive-advantage) - [Regulation (5)](https://insights.bankonitusa.com/tag/regulation) - [Information Security Bulletin (2)](https://insights.bankonitusa.com/tag/information-security-bulletin) - [Regulatory Bulletin (2)](https://insights.bankonitusa.com/tag/regulatory-bulletin) - [Press Release (1)](https://insights.bankonitusa.com/tag/press-release) See all ### Popular Posts #### [CEO Update - Q3 2025](https://insights.bankonitusa.com/ceo-update-q3-2025) #### [CEO Update - Q4 2025](https://insights.bankonitusa.com/ceo-update-q4-2025) #### [Information Security Brief - December 2024](https://insights.bankonitusa.com/information-security-brief-december-24) #### [Information Security Brief - July 2025](https://insights.bankonitusa.com/information-security-brief-july-2025) ## Submit your comment Upon completion you will be automatically redirected to the electronic Authorized Resellers Agreement. ## Related Posts Ready to do MORE with BankOnIT? [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) **Receive BankOnIT Insights.** Get timely information on cybersecurity, regulation, and other trends impacting your bank. #### About - [Overview](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) #### Solutions - [Overview](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Achieve Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) #### Contact - [Support: 1-800-498-8877](tel:18004988877) - [Sales: 405-653-1920](tel:4056531920) #### Social - [Follow Us On LinkedIn](https://www.linkedin.com/company/bankonitusa/) ![BOI-Logo-PNG](https://insights.bankonitusa.com/hubfs/BOI-Logo-PNG.png "BOI-Logo-PNG") © 2023 BankOnITUSA, LLC.[Privacy](https://www.bankonitusa.com/privacy-policy/)