kerberos security

Windows domain administrators installing July 2026 updates must treat the change as an inventory deadline, not another Kerberos registry adjustment. Microsoft KB5073381 says those updates stop honoring RC4DefaultDisablementPhase, removing the temporary rollback path that allowed domain...

Microsoft has released KB5101650 for Windows 11 versions 25H2 and 24H2, moving both platforms to OS builds 26200.8875 and 26100.8875 respectively. The July 14, 2026 cumulative update delivers this month’s security fixes, incorporates changes from the June optional preview, repairs an Office...

Additional coverage of this story: CVE-2026-20833: July Updates End Kerberos RC4 Rollback It identifies CVE-2026-20833 and explains that July removes only implicit RC4 fallback: explicitly configured DefaultDomainSupportedEncTypes and msDS-SupportedEncryptionTypes settings can still permit RC4...

Microsoft’s July 14, 2026 cumulative updates will permanently remove Windows domain controllers’ Kerberos RC4 rollback control, while administrators must separately verify that Microsoft Malware Protection Engine version 1.1.26060.3008 or later reached every Defender endpoint. A third deadline...

Microsoft’s June 2026 Windows recap says Windows 11 version 26H2 is now in early Insider testing, Windows 365 is gaining developer and AI-agent capabilities, and IT admins should prepare for July changes to printing, Kerberos security, recovery, and Windows 10 extended support. The story is not...

Microsoft has quietly but deliberately set a firm deadline to end a decades‑long compatibility compromise: RC4 (RC4‑HMAC) will no longer be the assumed, permissive fallback for Kerberos ticket encryption on Windows domain controllers, and Microsoft has delivered a staged rollout tied to...

Microsoft’s tracking entry for CVE-2026-20849 records an elevation‑of‑privilege defect in the Windows Kerberos authentication stack, but the public advisory is deliberately concise: the vendor confirms the vulnerability’s existence while publishing limited low‑level exploit detail — a disclosure...

Microsoft’s security portal registers CVE-2026-20849 as a Kerberos-related elevation-of-privilege vulnerability in Windows, and the entry — while authoritative about impact class — leaves critical exploit mechanics and low-level root causes deliberately sparse; the vendor’s confidence signal...