Fixing a Security Vulnerability in Active Directory with Steve Syfuhs
RunAs Radio4 Juni 2025

Fixing a Security Vulnerability in Active Directory with Steve Syfuhs

Why would a security vulnerability take more than two years to fix? Richard chats with Steve Syfuhs about the evolution of the response to KB5015754. Originally published in 2022, the issue involved vulnerabilities in the on-premises certificate authority for Active Directory. Pushing a fix to force the immediate replacement of the certificates could have left users unable to log into Active Directory entirely. Steve explains how the gradual rollout of the fix allowed folks concerned (and paying attention!) to fix it immediately. At the same time, for everyone else, the fix happened as the existing certificates expired. But not every scenario is automatic - some require sysadmin intervention. So, how do you get their attention? The story leads to the February 11, 2025 update that could knock some users off Active Directory, but had an easy and quick fix. The final phase should be September 2025; hopefully, the last stragglers will be ready!

Links

Recorded April 10, 2025

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(1057)

Cloudflare Edge Workers with Bob Fornal

Cloudflare Edge Workers with Bob Fornal

What can Cloudflare do for you? While at KCDC in Kansas City, Richard chatted with Bob Fornal about how his organization uses Cloudflare - not just for content delivery or DDoS protection, but also ed...

7 Okt 37min

AI and Penetration Testing with Paula Januszkiewicz

AI and Penetration Testing with Paula Januszkiewicz

How is artificial intelligence changing cybersecurity and penetration testing? Richard talks to Paula Januszkiewicz about how her team now uses large language models throughout the security workflow, ...

30 Sep 33min

Building Agents with Andrew Connell

Building Agents with Andrew Connell

Microsoft offers a surprising number of ways to build agents in Microsoft 365. Which one should you choose? Richard talks to Andrew Connell about the evolving Microsoft 365 Copilot landscape and the f...

23 Sep 39min

Patching in 2026 with Susan Bradley

Patching in 2026 with Susan Bradley

How has patching changed in 2026? Richard chats with patching goddess Susan Bradley about what she's seeing in vendor patches and how they're affecting consumers and businesses. On one hand, you have ...

16 Sep 35min

State of WSUS with Adam Marshall

State of WSUS with Adam Marshall

Windows Server Update Services (WSUS) was deprecated in Sept 2024 - when does it go away? Richard talks to Adam Marshall about how WSUS is still an essential service for Configuration Manager, include...

9 Sep 28min

Reimagining Intranets with Susan Hanley

Reimagining Intranets with Susan Hanley

How does AI change the intranet? Richard chats with Susan Hanley about her work helping organizations build great intranets and how tools like M365 Copilot are changing the intranet. Susan talks about...

2 Sep 36min

Security Features of PowerShell 7 with Mike O'Neill

Security Features of PowerShell 7 with Mike O'Neill

How secure are your PowerShell scripts? Richard talks to Mike O'Neill about the powerful security features introduced with PowerShell 7.3 and above, including session configuration files and clean blo...

26 Aug 31min

Automatic Attack Disruption with Liz Tesch

Automatic Attack Disruption with Liz Tesch

What if Microsoft Defender not only detected attackers - but also fought back? Richard talks to Liz Tesch about Microsoft Defender Automatic Attack Disruption and Predictive Shielding. Liz talks about...

19 Aug 38min

Populärt inom Business & ekonomi

framgangspodden
rss-jossan-nina
varvet
rss-borsens-finest
uppgang-och-fall
badfluence
avanzapodden
rss-inga-dumma-fragor-om-pengar
24fragor
rss-dr-bjorklund
lastbilspodden
bathina-en-podcast
fill-or-kill
rikatillsammans-om-privatekonomi-rikedom-i-livet
rss-kort-lang-analyspodden-fran-di
borsmorgon
rss-dagen-med-di
tabberaset
rss-hos-psykologen
ett-rikare-liv