New steps have been released to mitigate Kerberos signature validation vulnerabilities

Recent developments related to the Kerberos PAC Validation Protocol have necessitated the release of certain Take Action steps. These new steps (detailed in KB5037754) serve to prevent bypassing PAC signature validation security checks that were added earlier, in KB5020805. With the April 2024 security update, users can begin the initial deployment phase, with further phases commencing on October 15, 2024, and April 8, 2025. During the latter two phases, it will be imperative that Windows domain controllers and clients are updated to ensure security checks are executed effectively and properly. Failure to update and recognize new request structures can result in security checks failure. To ensure your environment and data are protected, please follow the recommended steps and keep your Windows environment up to date with the latest security update.

The post New steps have been released to mitigate Kerberos signature validation vulnerabilities originally appeared on M365 Admin.