PATCH WATCH By Susan Bradley It’s looking like consumers may have an issue-free month — if they don’t run Windows 11 machines — and businesses will ha
[See the full post at: May updates fix risks to networks]
Susan Bradley Patch Lady
![]() |
There are isolated problems with current patches, but they are well-known and documented on this site. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
Home » Forums » Newsletter and Homepage topics » May updates fix risks to networks
PATCH WATCH By Susan Bradley It’s looking like consumers may have an issue-free month — if they don’t run Windows 11 machines — and businesses will ha
[See the full post at: May updates fix risks to networks]
Susan Bradley Patch Lady
So it sounds like hold off on updating servers with AD?
Re. the AD CS updates, I checked Server Essentials and blogged about the Certificate Authority Web Enrollment mitigation:
https://www.mcbsys.com/blog/2022/05/secure-ad-cd-on-essentials-2016/
Re. the Essentials’ remotewebaccess DDNS updater going offline, that’s apparently fixed now, with the Microsoft rep summarizing as follows: “The tenant id had changed due to some internal changes. We fixed those. We do not expect to see the issue come back again.”
CISA is recommending not patching DCs. I’m not sure I would go that far, as not all networks use computer certificates. If you use NPS and certs for purposes of wirelesss access you will be impacted. If you don’t, you won’t see the side effects.
Susan Bradley Patch Lady
Will Dormann on Twitter: “@topotam77 @garrfoster @raphajohnsec @mkolsek OK, I can confirm the same. With the May 2022 updates, petitpotam still works for an authenticated attacker. The problem I ran into earlier was that my DC was at May 2022, but my ADCS was at the August level, from my earlier testing. As such, the trust relationship was broken.😡 https://t.co/NdUFUUxr8V” / Twitter
And even with the updates – we’re still vulnerable.
Susan Bradley Patch Lady
Something for Master Patch List browsers: Firefox ESR
For those of us who don’t mind, not getting all the latest features but prefer stability. Currently it is Firefox ESR 91.9; it works on most web sites. Between Firefox ESR and Chrome you can usually get a web site working.
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2023 by AskWoody Tech LLC. All Rights Reserved.