Breaking News

Apple unveils new Apple Watch Pride Edition bands Governor Wolf Announces New Investment in Electrical Industry Apprenticeships in Philadelphia County  General Mills, Inc. – General Mills to Webcast Two Upcoming Investor Events US Department of Labor cites Athens lumber manufacturer for ignoring required safety precautions after forklift fatally strikes worker The Western Union Company – Western Union to Present at the Bernstein Strategic Decisions Conference on June 2nd US Department of Labor obtains consent judgment directing Baltimore company, owner to restore $148K to 401(k) plan US government issues business advisory to alert companies, individuals of risks of business with Sudan’s state-owned enterprises, military-controlled companies 100-Mile Yard Sale Kicks Off This Week; Drivers Urged To Use Caution

CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations might experience authentication failures on the server or client for services, such as Network Policy Server (NPS), Routing and Remote access Service (RRAS), Radius, Extensible Authentication Protocol (EAP), and Protected Extensible Authentication Protocol (PEAP). Microsoft notified CISA of this issue, which is related to how the mapping of certificates to machine accounts is being handled by the domain controller.

For more information see the Microsoft Knowledge Base article, KB5014754—Certificate-based authentication changes on Windows domain controllers: Key Distribution Center registry key.

Note: installation of updates released May 10, 2022, on client Windows devices and non-domain controller Windows Servers will not cause this issue and is still strongly encouraged. This issue only affects May 10, 2022 updates installed on servers used as domain controllers. Organizations should continue to apply updates to client Windows devices and non-domain controller Windows Servers.

Source link