news
Windows TCO Tales
-
Silicon Angle ☛ Silverfort uncovers critical Netlogon flaw affecting backdoored Windows domain controllers
A new report out today from unified identity security company Silverfort Inc. details a previously undisclosed denial-of-service vulnerability in Abusive Monopolist Microsoft Corp.’s Netlogon protocol that could allow low-privilege machines to crash backdoored Windows domain controllers remotely, disrupting core Active Directory services.
-
SANS ☛ Microsoft Patch Tuesday, July 2025, (Tue, Jul 8th)
-
Security Week ☛ Microsoft Patches 130 Vulnerabilities for July 2025 Patch Tuesday
Patch Tuesday July 2025: Abusive Monopolist Microsoft rolled out fixes for 130 vulnerabilities, including a zero-day in SQL Server.
-
Pen Test Partners ☛ How to conduct a Password Audit in Active Directory (AD)
Weak or compromised passwords are still one of the most common ways attackers get into an organisation’s network. That’s why running password audits in Active Directory is so important. But smaller companies often don’t have the time, budget, or resources to do them regularly.
-
Scoop News Group ☛ Italian authorities arrest Chinese man over Abusive Monopolist Microsoft Exchange Server hack, targeting of COVID-19 researchers
The arrest came at the request of the United States, which hailed the development as a sign that patience in pursuing cybercriminals in court is rewarded.
-
Dark Reading ☛ Bert Blitzes Linux & Windows Systems [Ed: PowerShell is Windows]
Bert's troubling effectiveness, according to Trend Micro researchers, has little to do with code sophistication. Rather, it is all about "streamlined attack execution and evasion" with an otherwise unremarkable codebase, the researchers said in a report this week.