Cisco, Juniper, AVOSLocker, NoEscape,Valve, FreedomGPT, More News, and Aaran Leyland – SWN #334

Doug White

1. Biggest DDoSes of all time generated by protocol 0-day in HTTP/2
2. Cisco Devices Hacked via IOS XE Zero-Day Vulnerability
3. Juniper Networks Patches Over 30 Vulnerabilities in Junos OS
4. FBI, CISA warn critical infrastructure organizations about AvosLocker ransomware
5. Healthcare organizations a prime target for NoEscape ransomware, HHS warns
6. Steam enforces SMS verification to curb malware-ridden updates
7. A flood of misinformation shapes views of Israel-Gaza conflict
8. How to Use FreedomGPT to Install Free ChatGPT Alternatives Locally on Your Computer

Aaran Leyland

1. Microsoft To Kill NTLM And Expand Kerberos Authentication

   https://www.scworld.com/brief/kerberos-to-replace-ntlm-in-windows-11

   In an ever-changing digital landscape, robust security measures are paramount. As Windows adapts to meet the evolving demands of our world, user authentication, a cornerstone of Windows security, undergoes significant transformation.

   Microsoft is actively working to enhance user authentication by bolstering the reliability and flexibility of Kerberos while reducing its reliance on the older NT LAN Manager (NTLM) authentication protocol.

   Kerberos has been the default Windows authentication protocol since the turn of the millennium, but there are still scenarios where it proves inadequate, causing Windows to resort to NTLM.