Standard
Network authentication protocol using time-limited tickets so clients and services prove identity without sending passwords; core to Active Directory.
Fortra disclosed eight vulnerabilities in its BoKS privileged-access manager, three of them critical and one rated CVSS 9.9. Because the predictable passwords can be verified offline, applying the fix does not retire service-account credentials an attacker may already hold.
Reality
Fortra patched CVE-2026-79901, a CVSS 9.9 BoKS keytab flaw that lets any authenticated Active Directory user rebuild Unix service-account passwords offline. Patching replaces the generator, but passwords it already minted stay predictable until rotated.
Reality
The same release deletes the two NVIDIA-specific code paths Mutter carried for Wayland, so GeForce 700-series cards drop back to the open-source Nouveau driver. Fedora 45 and Ubuntu 26.10 both ship it.
Reality
Microsoft says it is investigating reports that the update leaves domain-joined Windows 11 25H2 machines rejecting valid credentials after reboot, and administrators are pointing at Machine Identity Isolation in enforcement mode.
Reality
Huntress's second post on Active Directory Rights Management Service traces every protected document back to one private key. The certificate runs 255 years, the key has no expiry, and the product ships no way to rotate it.
Reality
FreeIPA 4.13.3 lists seven security issues. The one that sets upgrade order needs no Active Directory at all, just LDAP write privileges inside the IPA domain, which is enough to impersonate a privileged service principal.
Reality
CVE-2026-76578 pairs a default FreeIPA access rule with a 389 Directory Server ownership check that an empty name satisfies, and Red Hat says it reproduced the chain twice on a stock install. The fix is 4.13.4.
Reality