James Forshaw :donor: on Nostr: Administrator Protection has finally been released in KB5067036. This is an optional ...
Administrator Protection has finally been released in KB5067036. This is an optional update, but it does fix 7 of the 9 issues that I reported to MSRC (hopefully the other 2 get fixed next month as security bulletins). I honestly don't know if they've actually fixed the SSPI issues like my Kerberos bypass or not, I'm not inclined to check. People should kick the tyres on it, maybe there's still some bounties to be had :D
Published at
2025-10-29 10:17:47 UTCEvent JSON
{
"id": "4734a3726b46faadf8ee31538f34d8f6adcb0cfd09d7121a6512894aad085433",
"pubkey": "706a8260a6dda46fbd813076c7df7072a9c25d8e9927974e9b1c8f0d6987b735",
"created_at": 1761733067,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@tiraniddo/115456938325968716",
"web"
],
[
"proxy",
"https://infosec.exchange/users/tiraniddo/statuses/115456938325968716",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/tiraniddo/statuses/115456938325968716",
"pink.momostr"
],
[
"-"
]
],
"content": "Administrator Protection has finally been released in KB5067036. This is an optional update, but it does fix 7 of the 9 issues that I reported to MSRC (hopefully the other 2 get fixed next month as security bulletins). I honestly don't know if they've actually fixed the SSPI issues like my Kerberos bypass or not, I'm not inclined to check. People should kick the tyres on it, maybe there's still some bounties to be had :D",
"sig": "8ee9d906e62f8ef2f65f02820afb43e297aad82a5a8b56a6e001619a6dd84adb82f3f0b81091b1ecf6a7446e83c1980ee6766ccd9fa57d6d8f7ef14926d323b7"
}
