90-Day Reminder: The second phase of Kerberos PAC signature validation vulnerability mitigation begins October 15, 2024

If you're using Windows domain controllers and clients, you should be aware of the upcoming Enforced by Default phase of Kerberos PAC signature validation mitigation, which starts on October 15, 2024. Updates released on or after that date will enforce secure behavior by default, with no option to revert. The change is intended to mitigate CVE-2024-26248 and CVE-2024-29056 vulnerabilities, but un-updated environments will cease to recognize the new request structure, causing security checks to fail. Users are advised to ensure they have the necessary updates and follow recommended security measures to prevent outages. In addition to KB5037754 and KB5020805, monitoring audit events and enabling enforcement mode can assist with the process.

The post 90-Day Reminder: The second phase of Kerberos PAC signature validation vulnerability mitigation begins October 15, 2024 appeared first on M365 Admin.