On-premises Identity-related updates and fixes for September 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for September 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for September 2023"

On-premises Identity-related updates and fixes for August 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for August 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for August 2023"

On-premises Identity-related updates and fixes for May 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for May 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for May 2023"

An LDAP Remote Code Execution Vulnerability affects your Domain Controllers (CVE-2023-28283, Critical CVSSv3 8.1/7.1)

Yesterday, for its May 2023 Patch Tuesday, Microsoft released a critical security update for Domain Controllers and Windows Server installations offering Active Directory Lightweight Directory Services. This vulnerability is known as CVE-2023-28283 and rated with CVSSv3.1 scores of 8.1/7.1. A remote code execution vulnerability exists in the Windows Lightweight Directory Access Protocol (LDAP). An adversary … Continue reading "An LDAP Remote Code Execution Vulnerability affects your Domain Controllers (CVE-2023-28283, Critical CVSSv3 8.1/7.1)"

On-premises Identity-related updates and fixes for April 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for April 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for April 2023"

The April 2023 Updates provide further urgency to Netlogon RPC Sealing

With the November 2022 Updates for Windows Server, Microsoft implemented Netlogon protocol changes as part of mitigating the vulnerability associated with CVE-2022-38023. With the April 2023 Updates for Windows Server, another vulnerability is addressed in the same context.   About CVE-2022-38023 (November 2022) Through this vulnerability, an authenticated adversary could leverage cryptographic protocol vulnerabilities in … Continue reading "The April 2023 Updates provide further urgency to Netlogon RPC Sealing"

Ten DNS Server vulnerabilities could lead to Remote Code Execution and Information Disclosure on Domain Controllers with default configurations

When looking at the April 2023 Patch Tuesday today, I noticed ten updates that specifically address vulnerabilities in DNS Server. These vulnerabilities are specific to Domain Controllers running DNS Server (in the default configuration), so this sparked my interest in these updates.   About the vulnerabilities Nine DNS Server remote code execution vulnerabilities were addressed: … Continue reading "Ten DNS Server vulnerabilities could lead to Remote Code Execution and Information Disclosure on Domain Controllers with default configurations"

On-premises Identity-related updates and fixes for March 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for March 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for March 2023"

On-premises Identity-related updates and fixes for February 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for February 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for February 2023"

On-premises Identity-related updates and fixes for January 2023

Even though Microsoft’s Identity focus moves towards the cloud, Windows Server 2016, Windows Server 2019 and Windows Server 2022 still receive updates to improve the experiences and security of Microsoft’s on-premises powerhouses. This is the list of Identity-related updates and fixes we saw for January 2023:   Windows Server 2016 We observed the following update … Continue reading "On-premises Identity-related updates and fixes for January 2023"