Critical Citrix Vulnerabilities Disclosed! VBScript Deprecated! Patch Tuesday News!

On this week’s episode I do a roundup of the Patch Tuesday news for October, I dive into the recently disclosed Citrix vulnerabilities, the deprecation of VBScript and more!

This episode is brought to you in large part thanks to my sponsors:

Episode 303 is available on Soundcloud:

And on YouTube:

If you’d like to play the Podcast on a different podcast service such as Apple Podcasts, Google Podcasts or Spotify. You can find this episode at 5BytesPodcast.com

Here are this episode’s links as shown in the YouTube video:

Scripts, Tricks and Tips:

How to Hide Azure Arc System Tray:

https://twitter.com/WorkingHardInIT/status/1712035265580052749

Blog Post on Debugging Crashes:

https://chnasarre.medium.com/crap-the-application-is-randomly-crashing-b105a6a5a7e8

Merill’s AD Properties Tip:

https://twitter.com/merill/status/1709379599405359349

Patch Tuesday News Roundup:

https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2023-patch-tuesday-fixes-3-zero-days-104-flaws/

Largest Denial of Service in History:

https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/

Server 2012 Reaches End of Life:

https://www.bleepingcomputer.com/news/microsoft/windows-11-21h2-and-windows-server-2012-reach-end-of-support/

VBScript Officially Deprecated:

https://learn.microsoft.com/en-us/windows/whats-new/deprecated-features

Microsoft Plans to Eliminate NTLM:

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-evolution-of-windows-authentication/ba-p/3926848

Critical Citrix Vulnerabilities:

https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967

Poppelgaard.com Rundown of Vulnerabilities:

https://www.poppelgaard.com/cve-2023-4966-and-cve-2023-4967-what-you-should-know-and-how-to-fix-your-netscaler-adc-netscaler-gateway

What’s New in ADDS:

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/whats-new-active-directory-domain-services-insider-preview

Bitlocker Reporting Issue in Intune:

https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-incorrect-bitlocker-encryption-errors/

Google to Make Passkey the new Default:

https://arstechnica.com/gadgets/2023/10/google-will-now-make-passkeys-the-default-for-personal-accounts/

New Defender Feature to Prevent Lateral Movement:

https://www.bleepingcomputer.com/news/security/microsoft-defender-now-auto-isolates-compromised-accounts/

23andMe Credential Stuffing:

https://arstechnica.com/security/2023/10/private-23andme-user-data-is-up-for-sale-after-online-scraping-spree/

Citrix is announcing intended support for Amazon WorkSpaces Core:

https://www.youtube.com/watch?v=UYbm265RuLU

Amazon to make MFA Mandatory:

https://www.bleepingcomputer.com/news/security/amazon-to-make-mfa-mandatory-for-root-aws-accounts-by-mid-2024/

Teams for VDI Client Will Not Support Server 2016:

https://twitter.com/citrixguyblog/status/1710185045699264753

Adobe’s Content Credential Tag:

https://arstechnica.com/information-technology/2023/10/adobe-launches-new-symbol-to-tag-ai-generated-content-but-will-anyone-use-it/

PhD Student Fixes 22 Year Old Firefox Bug:

https://arstechnica.com/gadgets/2023/10/22-year-old-firefox-tooltip-bug-fixed-in-a-few-lines-offering-hope-to-us-all/

300th Episode Giveaway:

https://sweepwidget.com/c/73417-0dcho8t4

Full Podcast Episode Guide:
5bytespodcast.com

Check out my site:
Rorymon.com

Twitter:
@Rorymon