התחל במצב לא מקוון עם האפליקציה Player FM !
Fixing a Security Vulnerability in Active Directory with Steve Syfuhs
Manage episode 486735153 series 19264
Why would a security vulnerability take more than two years to fix? Richard chats with Steve Syfuhs about the evolution of the response to KB5015754. Originally published in 2022, the issue involved vulnerabilities in the on-premises certificate authority for Active Directory. Pushing a fix to force the immediate replacement of the certificates could have left users unable to log into Active Directory entirely. Steve explains how the gradual rollout of the fix allowed folks concerned (and paying attention!) to fix it immediately. At the same time, for everyone else, the fix happened as the existing certificates expired. But not every scenario is automatic - some require sysadmin intervention. So, how do you get their attention? The story leads to the February 11, 2025 update that could knock some users off Active Directory, but had an easy and quick fix. The final phase should be September 2025; hopefully, the last stragglers will be ready!
Links
Recorded April 10, 2025
1027 פרקים
Manage episode 486735153 series 19264
Why would a security vulnerability take more than two years to fix? Richard chats with Steve Syfuhs about the evolution of the response to KB5015754. Originally published in 2022, the issue involved vulnerabilities in the on-premises certificate authority for Active Directory. Pushing a fix to force the immediate replacement of the certificates could have left users unable to log into Active Directory entirely. Steve explains how the gradual rollout of the fix allowed folks concerned (and paying attention!) to fix it immediately. At the same time, for everyone else, the fix happened as the existing certificates expired. But not every scenario is automatic - some require sysadmin intervention. So, how do you get their attention? The story leads to the February 11, 2025 update that could knock some users off Active Directory, but had an easy and quick fix. The final phase should be September 2025; hopefully, the last stragglers will be ready!
Links
Recorded April 10, 2025
1027 פרקים
כל הפרקים
×

1 Copilot Studio with April Dunnam 35:43




1 Building Real Software using PowerApps with Luise Freese 38:35


1 More Azure Innovations with Mark Russinovich 30:18


1 Getting More from GitHub with April Yoho 33:10




1 The Case for Telemetry with Liz Fong-Jones 32:17


1 Fixing a Security Vulnerability in Active Directory with Steve Syfuhs 49:33


1 How to Talk to Security with Sarah Young 35:48


1 PowerShell 7.5 and DSC 3.0.0 with Jason Helmick 36:47


1 Active Directory in 2025 with Liz Tesch 34:38


1 Building a Career in Cybersecurity with Yuri Diogenes 36:29


1 Modern Work in 2025 with Karoliina Kettukari 34:55


1 Agentic AI for IT Pros with Tim Warner 34:44


1 How to Not Hate PowerShell with Barbara Forbes 36:54
ברוכים הבאים אל Player FM!
Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.