Protections for CVE-2025-26647 (Kerberos Authentication)
Monitor new events that will be visible on domain controllers to identify affected certificate authorities that are not part of the NTAuth store. The Event ID you need to monitor is Event ID: 45.
Mitigation of a large number of block events that collect in the MDATP ...
Describes how to mitigate large numbers of block events that collect in the MDATP portal.
March 10, 2026—KB5078883 (OS Build 22631.6783) - Microsoft Support
This cumulative update for Windows 11, version 23H2 (KB5078883), includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release.
How to spot a "fake order" scam | Microsoft Support
In order to cancel the fake order, you'll either have to click a link or call them on the telephone. Either way, the ultimate goal of the scammers is to get you to give them some personal information. They'll claim it's for the purposes of canceling the fake order.
KB4073757: Protect Windows devices against silicon-based ...
On May 21, 2018, Google Project Zero (GPZ), Microsoft, and Intel disclosed two new chip vulnerabilities that are related to the Spectre and Meltdown issues and are known as Speculative Store Bypass (SSB) and Rogue System Registry Read. The customer risk from both disclosures is low.
Turn on Control flow guard on your computer - Microsoft Support
Important: Starting March 5, 2025, Windows Subsystem for Android™ and the Amazon Appstore aren't available in the Microsoft Store. To run Windows Subsystem for Android™ you’ll need to turn on Control flow guard (if you have a Windows version with build 25266 or earlier).
KB5008380—Authentication updates (CVE-2021-42287) - Microsoft Support
CVE-2021-42287 addresses a security bypass vulnerability that affects the Kerberos Privilege Attribute Certificate (PAC) and allows potential attackers to impersonate domain controllers.
October 8, 2024—KB5044343 (Monthly Rollup)
SSUs improve the reliability of the update process to mitigate potential issues while installing the Monthly Rollup and applying Microsoft security fixes. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
2020, 2023, and 2024 LDAP channel binding and LDAP signing requirements ...
A set of unsafe default configurations for LDAP channel binding and LDAP signing exist on Active Directory domain controllers that let LDAP clients communicate with them without enforcing LDAP channel binding and LDAP signing.
Microsoft Support
Explore Microsoft Support for assistance, troubleshooting, and learning resources to enhance your experience with Microsoft products and services.