Free Republic

Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not want to do that given the recently patched vulnerability that has security experts deeply concerned.CVE-2024-37085 only carries a 6.8 CVSS rating, but has been used as a post-compromise technique by many of the world's most high-profile ransomware groups and their affiliates, including Black Basta, Akira, Medusa, and Octo Tempest/Scattered Spider.The vulnerability allows attackers who have the necessary privileges to create AD groups – which isn't necessarily an AD admin – to gain full control of...

[Dayglored Note: This is primarily for Windows Administrators, but is of potential concern to ALL Windows users.] Also see:Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controllerPrintNightmare: Windows Zero-Day Accidentally Disclosed by Chinese ResearchersPublic Windows PrintNightmare 0-day exploit allows domain takeoverPrintNightmare, Critical Windows Print Spooler Vulnerability Original release date: June 30, 2021 The CERT Coordination Center (CERT/CC) has released a VulNote for a critical remote code execution vulnerability in the Windows Print spooler service, noting: “while Microsoft has released an update for CVE-2021-1675, it is important to realize that this update does not...

I need some help finding a 'gadget' for Windows 7 and Active Directory and I was hoping perhaps someone on FR could help. What I'm looking for is a simple gadget that shows selected Active Directory user account logons in real time. Meaning I'd be able to see at a glance a small table of users (up to ten maybe) who are logged on and, perhaps, for how long they've been logged on. Thank you for reading this and thanks for your help.