#Critical #Citrix #Vulnerabilities #Disclosed #VBScript #Deprecated #Patch #Tuesday #News
On this week’s episode I do a roundup of the Patch Tuesday news for October, I dive into the recently disclosed Citrix vulnerabilities, the deprecation of VBScript and more!
This episode is brought to you in large part thanks to my sponsors:
Episode 303 is available on Soundcloud:
And on YouTube:
If you’d like to play the Podcast on a different podcast service such as Apple Podcasts, Google Podcasts or Spotify. You can find this episode at 5BytesPodcast.com
Here are this episode’s links as shown in the YouTube video:
Scripts, Tricks and Tips:
How to Hide Azure Arc System Tray:
https://twitter.com/WorkingHardInIT/status/1712035265580052749
Blog Post on Debugging Crashes:
https://chnasarre.medium.com/crap-the-application-is-randomly-crashing-b105a6a5a7e8
Merill’s AD Properties Tip:
https://twitter.com/merill/status/1709379599405359349
Patch Tuesday News Roundup:
https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2023-patch-tuesday-fixes-3-zero-days-104-flaws/
Largest Denial of Service in History:
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
Server 2012 Reaches End of Life:
https://www.bleepingcomputer.com/news/microsoft/windows-11-21h2-and-windows-server-2012-reach-end-of-support/
VBScript Officially Deprecated:
https://learn.microsoft.com/en-us/windows/whats-new/deprecated-features
Microsoft Plans to Eliminate NTLM:
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-evolution-of-windows-authentication/ba-p/3926848
Critical Citrix Vulnerabilities:
https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967
Poppelgaard.com Rundown of Vulnerabilities:
https://www.poppelgaard.com/cve-2023-4966-and-cve-2023-4967-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway
What’s New in ADDS:
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/whats-new-active-directory-domain-services-insider-preview
Bitlocker Reporting Issue in Intune:
https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-incorrect-bitlocker-encryption-errors/
Google to Make Passkey the new Default:
https://arstechnica.com/gadgets/2023/10/google-will-now-make-passkeys-the-default-for-personal-accounts/
New Defender Feature to Prevent Lateral Movement:
https://www.bleepingcomputer.com/news/security/microsoft-defender-now-auto-isolates-compromised-accounts/
23andMe Credential Stuffing:
https://arstechnica.com/security/2023/10/private-23andme-user-data-is-up-for-sale-after-online-scraping-spree/
Citrix is announcing intended support for Amazon WorkSpaces Core:
https://www.youtube.com/watch?v=UYbm265RuLU
Amazon to make MFA Mandatory:
https://www.bleepingcomputer.com/news/security/amazon-to-make-mfa-mandatory-for-root-aws-accounts-by-mid-2024/
Teams for VDI Client Will Not Support Server 2016:
https://twitter.com/citrixguyblog/status/1710185045699264753
Adobe’s Content Credential Tag:
https://arstechnica.com/information-technology/2023/10/adobe-launches-new-symbol-to-tag-ai-generated-content-but-will-anyone-use-it/
PhD Student Fixes 22 Year Old Firefox Bug:
https://arstechnica.com/gadgets/2023/10/22-year-old-firefox-tooltip-bug-fixed-in-a-few-lines-offering-hope-to-us-all/
300th Episode Giveaway:
https://sweepwidget.com/c/73417-0dcho8t4
Full Podcast Episode Guide:
5bytespodcast.com
Check out my site:
Rorymon.com
Twitter:
@Rorymon
