Tenable Blog

Any Active Directory user can have their password requirements negated with a simple command. Here’s how to identify these gaps before an attacker does.

With Active Directory being around for so long, organizations and administrators get complacent with what they “think” is in place, which can lead to major security issues being exposed. Let’s take the fact that any Active Directory user can have their password requirements completely negated with a simple command. This setting is not obvious and can be missed during a security review or audit.

Oracle addresses over 250 CVEs in its second quarterly update of 2021 with 390 patches, including 34 critical updates.

Nine new DNS-related vulnerabilities have been identified across TCP/IP stacks embedded in millions of devices.

Update May 19, 2021: The Identifying Affected Systems section has been updated to reflect the availability of service detection plugins for three of the four open source TCP/IP stacks referenced in this blog post.

One month after disclosing four zero-day vulnerabilities in Exchange Server, Microsoft addresses four additional vulnerabilities discovered by the National Security Agency (NSA).

Background

On April 13, as part of its April 2021 Patch Tuesday release, Microsoft addressed four critical vulnerabilities in Microsoft Exchange Server.