Authentication, SMB and Windows

Authentication

SMB

Windows

It's 2022. Why do you keep using SMB?

Ivanti

MARCH 4, 2022

During the last 25 years, companies have relied on SMB protocol to allow them to collaborate and centralize corporate documents. The history of SMB (and why it's no longer relevant). The latest iteration, SMB 3.1.1, Windows 10?and?Windows Windows Server 2016. These are the good old shared drives we all know well.

SMB

SMB LAN Authentication Windows

CVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX Vulnerability

Tenable

DECEMBER 21, 2022

CVE-2022-37958 is a remote code execution (RCE) vulnerability in the SPNEGO NEGOEX protocol of Windows operating systems, which supports authentication in applications. KB5017308: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (September 2022). KB5017328: Windows 11 Security Update (September 2022).

Windows

Windows SMB Authentication Research

Join 48,000+

Insiders

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

Trending Sources

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Tenable

JUNE 9, 2020

The updates this month include patches for Microsoft Windows, Microsoft Edge, ChakraCore, Internet Explorer, Microsoft Office, Microsoft Office Services and Web Apps, Windows Defender, Microsoft Dynamics, Visual Studio, Azure DevOps and Adobe Flash Player. CVE-2020-1194 | Windows Registry Denial of Service Vulnerability.

SMB

SMB Software Review Systems Review Windows

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Tenable

AUGUST 9, 2022

Microsoft Windows Support Diagnostic Tool (MSDT). Role: Windows Fax Service. Role: Windows Hyper-V. Windows Bluetooth Service. Windows Canonical Display Driver. Windows Cloud Files Mini Filter Driver. Windows Defender Credential Guard. Windows Digital Media. Windows Digital Media.

SMB

SMB Azure Windows Disaster Recovery

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

Tenable

MARCH 8, 2022

Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Tablet Windows User Interface. Windows Ancillary Function Driver for WinSock. Windows CD-ROM Driver. Windows Cloud Files Mini Filter Driver. Windows COM. Windows Common Log File System Driver. Windows Media.

Windows

Windows Authentication SMB .Net

Slack Patches Download Hijack Vulnerability in Windows Desktop App

Tenable

MAY 17, 2019

Tenable Researcher David Wells discovered a vulnerability in Slack Desktop for Windows that could have allowed an attacker to alter where files downloaded within Slack are stored. for Windows. We cannot confirm how many of those are Windows App users. Confirm that your Slack for Windows is updated to version 3.4.0.

Windows

Windows SMB Authentication Malware

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Tenable

JUNE 14, 2022

Microsoft Windows ALPC. Microsoft Windows Codecs Library. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows Autopilot. Windows Container Isolation FS Filter Driver. Windows Container Manager Service. Windows Defender. Windows Installer.

Windows

Windows Azure SMB Internet

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Tenable

APRIL 12, 2022

Microsoft Windows ALPC. Microsoft Windows Codecs Library. Microsoft Windows Media Foundation. Role: Windows Hyper-V. Windows Ancillary Function Driver for WinSock. Windows App Store. Windows AppX Package Manager. Windows Cluster Client Failover. Windows Cluster Shared Volume (CSV).

Windows

Windows Systems Review Software Review SMB

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310)

Tenable

APRIL 13, 2021

Microsoft Windows Codecs Library. Microsoft Windows Speech. Windows Application Compatibility Cache. Windows AppX Deployment Extensions. Windows AppX Deployment Extensions. Windows Console Driver. Windows Diagnostic Hub. Windows Early Launch Antimalware Driver. Windows ELAM. DNS Server.

Windows

Windows Azure SMB Report

Microsoft’s July 2021 Patch Tuesday Includes 116 CVEs (CVE-2021-31979, CVE-2021-33771)

Tenable

JULY 13, 2021

Microsoft Windows Codecs Library. Microsoft Windows DNS. Microsoft Windows Media Foundation. Windows Active Directory. Windows Address Book. Windows AF_UNIX Socket Provider. Windows AppContainer. Windows AppContainer. Windows AppX Deployment Extensions. Windows Authenticode.

Windows

Windows Software Review Malware SMB

5 Ways to Protect Scanning Credentials for Windows Hosts

Tenable

MAY 8, 2020

Here, we provide specific guidance for Microsoft Windows systems. When it comes to protecting credentials in a Microsoft Windows Active Directory environment, though, we have specific guidance. When configuring service account(s) for use in credentialed scanning, below are some key considerations unique to Windows hosts.

Windows

Windows SMB Authentication Network

SMBleed (CVE-2020-1206) and SMBLost (CVE-2020-1301) Vulnerabilities Affect Microsoft SMBv3 and SMBv1

Tenable

JUNE 10, 2020

Three months after an out-of-band patch was released for SMBGhost, aka EternalDarkness (CVE-2020-0796), researchers disclosed two new flaws affecting Microsoft’s Server Message Block (SMB) protocol, including working proof-of-concepts. As a result, Microsoft announced in April 2012 that SMB version 2.2 SMB version 3.1.1

Systems Review

Systems Review Software Review SMB Development Team Review

Microsoft’s May 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-31166)

Tenable

MAY 11, 2021

Microsoft Windows Codecs Library. Microsoft Windows IrDA. Windows Container Isolation FS Filter Driver. Windows Container Manager Service. Windows Cryptographic Services. Windows CSC Service. Windows Desktop Bridge. Windows OLE. Windows Projected File System FS Filter. Role: Hyper-V.

Windows

Windows SMB Wireless .Net

CISA Directive 22-01: How Tenable Can Help You Find and Fix Known Exploited Vulnerabilities

Tenable

NOVEMBER 10, 2021

From a network scan perspective, fully authenticated assessments are a key part of that process as they provide up to 45 times more findings and insight than uncredentialed assessments (assessments by Nessus Agent are authenticated in terms of plugin coverage). Source: Tenable, November 2021. Causes various plugins to work harder.

Systems Review

Systems Review Software Review Authentication Policies

50 Best HIPAA-Compliant Cloud Storage Solutions

Datica

SEPTEMBER 11, 2019

Amazon FSx for Windows File Server ( @awscloud ). Amazon FSx for Windows File Server offers a fully managed native Microsoft Windows file system so that you can easily migrate your Windows-based applications to AWS. Key Features: Native Windows compatibility. Broadly accessible since it supports the SMB protocol.

Storage

Storage Cloud Backup Disaster Recovery

CTO Universe

It's 2022. Why do you keep using SMB?

CVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX Vulnerability

Webinars

Trending Sources

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Webinars

Microsoft’s August 2022 Patch Tuesday Addresses 118 CVEs (CVE-2022-34713)

Microsoft’s March 2022 Patch Tuesday Addresses 71 CVEs (CVE-2022-23277, CVE-2022-24508)

Slack Patches Download Hijack Vulnerability in Windows Desktop App

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)

Microsoft’s April 2021 Patch Tuesday Addresses 108 CVEs (CVE-2021-28310)

Microsoft’s July 2021 Patch Tuesday Includes 116 CVEs (CVE-2021-31979, CVE-2021-33771)

5 Ways to Protect Scanning Credentials for Windows Hosts

SMBleed (CVE-2020-1206) and SMBLost (CVE-2020-1301) Vulnerabilities Affect Microsoft SMBv3 and SMBv1

Microsoft’s May 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-31166)

CISA Directive 22-01: How Tenable Can Help You Find and Fix Known Exploited Vulnerabilities

50 Best HIPAA-Compliant Cloud Storage Solutions

Stay Connected