Authentication
The latest Authentication coverage — news, analysis, and updates from the WindowsNews.AI desk.
CISA Warns: Rockwell ArmorBlock 5000 Flaws Allow Remote Session Hijack, Score Hits 8.8
Two high-severity vulnerabilities in Rockwell Automation’s ArmorBlock 5000 I/O modules allow attackers to hijack web management sessions without credentials, CISA warned on August 14, 2025. The...
Patch for Windows Netlogon DoS Vulnerability Triggers NAS and Samba Issues, Secure Boot Deadlines Loom
Windows Server administrators juggling urgent patches and looming firmware deadlines just got a stark reminder that security hardening can break third-party integrations. Microsoft’s July 8, 2025...
Microsoft's CVE-2025-53793 Advisory: Azure Stack Hub Authentication Flaw Exposes Sensitive Data
Microsoft has published an urgent security advisory for CVE-2025-53793, an improper authentication vulnerability in Azure Stack Hub that could allow unauthenticated attackers to access sensitive...
CVE-2025-53779: New Kerberos Path Traversal Bug Opens Door to Privilege Escalation—Patch Now
Microsoft’s security team has published guidance for CVE-2025-53779, a newly disclosed vulnerability in Windows Kerberos that could let authenticated attackers on the network elevate their...
CVE-2025-33057: Microsoft Patches LSASS Null Pointer DoS That Can Crash Domain Controllers
Microsoft has released a security update for a vulnerability that allows an attacker with network access to crash the Local Security Authority Subsystem Service (LSASS) and trigger a...
CVE-2025-53138: Windows Server RRAS Vulnerability Leaks Sensitive Memory
Microsoft's latest security advisory warns of CVE-2025-53138, a newly disclosed information disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS). The flaw, rooted in the...
Microsoft Patches Critical Use-After-Free in Windows PPP EAP‑TLS, Enabling Local Privilege Escalation
Microsoft has issued a security advisory for CVE‑2025‑50159, a use‑after‑free vulnerability in the Remote Access Point‑to‑Point Protocol (PPP) EAP‑TLS implementation that can allow an...
Microsoft Patches Critical RCE Flaw in IIS Web Deploy – CVE-2025-53772 Threatens Exposed Servers
Microsoft has issued a high-priority security advisory for a deserialization vulnerability in its Web Deploy tool that could give authenticated attackers the ability to execute arbitrary code on...
Microsoft Fixes SQL Server Flaw That Allows Privilege Escalation via SQL Injection
Microsoft’s July 2025 Patch Tuesday release includes a fix for a high-severity SQL injection vulnerability in SQL Server that enables authenticated attackers to escalate privileges and seize...
Live Hack Exposes Windows Hello Biometric Loophole—Researchers Say Disable It Now
A packed auditorium at Black Hat 2025 in Las Vegas watched in silence as security researcher Tillmann Osswald remotely enrolled his own face onto his colleague’s Windows Hello-protected...
Microsoft Passkeys: Leading the Future of Secure, Passwordless Authentication
As technology evolves, the quest for both seamless user experience and robust security in digital authentication has intensified. With attacks on traditional password systems growing ever more...
The Evolution of Cloud Phishing: Microsoft OAuth Exploitation and AI-Driven Attacks
Phishing campaigns in the cloud era have undergone a fundamental evolution, leveraging both novel attack surfaces and the expanded reach of cloud identity management systems. Nowhere is this...