Tag

Domain Controllers

All articles tagged with #domain controllers

technology1 month ago•3 min saved

April 2026 patch triggers LSASS crashes and reboot loops on PAM-protected domain controllers

Microsoft warns that the April 2026 security update KB5082063 can cause LSASS crashes and reboot loops on non-GC domain controllers in Privileged Access Management environments during startup, breaking authentication and directory services on affected Windows Server versions (2025, 2022, 23H2, 2019, 2016). Admins should contact Microsoft Support for Business for mitigations even after patching; a fix is in progress. The company also notes separate issues: potential install failures on some Server 2025 systems and BitLocker key prompts after the update.

via BleepingComputer|

#domain-controllers #kb5082063 #lsass-crash

network-security9 months ago•4 min saved

New DDoS Flaws Enable Attackers to Turn Domain Controllers into Botnets

Researchers have discovered a new technique called Win-DDoS that exploits flaws in Windows LDAP and RPC protocols to turn public domain controllers into a powerful botnet for DDoS attacks, without requiring code execution or credentials, and identified multiple related DoS vulnerabilities that can be exploited remotely or internally, challenging assumptions about internal system safety.

via The Hacker News|

#ddos #domain-controllers #ldap

technology2 years ago•1 min saved

"Microsoft's Emergency Fixes for Windows Server Memory Leaks"

Microsoft has released emergency out-of-band updates to address a memory leak in the LSASS process causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates. The issue affects servers with the latest Windows Server 2012 R2, 2016, 2019, and 2022 updates, leading to ballooning memory usage and unexpected reboots. Admins can download and install the emergency updates from the Microsoft Update Catalog to resolve the problem.

via BleepingComputer|

#domain-controllers #emergency-fix #lsass-memory-leak

technology2 years ago•2 min saved

"Windows Server Update Woes: Domain Controller Crashes and Reboots"

The March 2024 Windows Server updates are causing domain controllers to crash and reboot due to a memory leak in the Local Security Authority Subsystem Service (LSASS) process. Admins are advised to uninstall the KB5035855 and KB5035857 updates as a temporary workaround until Microsoft officially addresses the issue. This is not the first time LSASS memory leaks have affected domain controllers, with similar issues reported in December 2022 and March 2022.

via BleepingComputer|

#domain-controllers #lsass #memory-leak