Microsoft's operating systems are now better protected than before. Microsoft's latest update has fixed more than a handful of issues plaguing its two active operating systems (OS).
Long-awaited security fixes for ProxyNotShell and Mark of the Web bypasses are part of a glut of actively exploited zero-day vulnerabilities and other critical flaws that admins need to prioritize in the coming hours.
While helping Andrew Schwartz with his Kerberos FAST post (which has more information about what FAST is and how it works, so have a read), I noticed something interesting. AS-REQs for machine accounts are unarmored. This is described by Microsoft here: Kerberos armoring uses a ticket-granting ticket (TGT) for the device to protect authentication service . The post New Attack Paths? AS Requested Service Tickets appeared first on Semperis.