Collaborate Disseminate
The US Cybersecurity and Infrastructure Security Agency (CISA) has temporarily… Continue reading CISA Warns Windows Admins Against Applying May Patch Tuesday Updates on Domain Controllers
Microsoft has acknowledged a new issue that causes authentication failures… Continue reading Microsoft Confirms May 2022 Patch Tuesday Updates Cause AD Authentication Issues
Microsoft is finally getting ready to deprecate the SMB1 (Server… Continue reading Microsoft to Disable SMB1 File-Sharing Protocol By Default on Windows 11
Installing Active Directory domain controllers in a virtual machine (VM)… Continue reading Best Practices for Installing Active Directory Domain Controllers in a Virtual Machine
Three days have passed since Microsoft’s latest Patch Tuesday, and CVE-2022-26809 has emerged as the vulnerability with the most exploitation potential. It’s easy to see why: it may be exploited by unauthenticated, remote attackers to breac… Continue reading Critical Microsoft RPC runtime bug: No PoC exploit yet, but patch ASAP! (CVE-2022-26809)
Microsoft Defender for Endpoint is finally getting support for some… Continue reading Microsoft Defender for Endpoint Adds Support for Windows Server 2012 R2 and 2016
Microsoft has announced some important changes that should make it… Continue reading Microsoft Lets Windows Server Admins Opt-In for Automatic .NET Updates
In kerberoasting , User request service ticket for any service with registered SPN then use the ticket to crack service password.
But in kerberoses authentication process , KRB_TGS_REQ request is encrypted with TGS secret key which is held… Continue reading TGS Ticket in Kerberoasting
Is there a patch for the lucky-13 vulnerability on Windows (Apart from manually disabling certain ciphers).
(I am using IIS and Windows Server 2022)
Continue reading Is there a patch for lucky-13 on Windows Server 2022 [migrated]
We have a Windows Server 2016 that we use as a web server hosted on premise and we host numerous web applications under the Default Web Site in IIS. All applications are reached by using the server name, only. There are no fully qualified … Continue reading security certificate does not specify Subject Alternative Names