Ouch

Yeah, reddit is removing old.reddit.com access from accounts that haven't used it in 6 months...

It’s the most clever thing I’ve come up with this year…glad someone noticed.

coworkers spent like 2 hours asking chatgpt

Now you have a list of "who to fire soon" at least.

https://techxplore.com/news/2021-07-solarwinds-business-company-n-able.html

Spun off 2021.

I see what you did there

Nailed it RIGHT on the head.

Here are the published vulnerabilities, published 15 hours ago: https://github.com/Oracle-Security/CVEs/tree/main/0-Days/N-Central%20N-Able

N-Able status page is saying it's "public disclosure and non-responsible communication of critical vulnerabilities" but according to the GitHub repo author

These are disclosed responsibly and vendors have been contacted. In any instance where it works against the live version, the vendor has not responded to my emails.

It's pretty much he said, she said, but the repo author has no reason to lie about this while the corporate has plenty of reasons...

Yeah sorry for linking to that site filled with bots and trash, it's the only public-facing admission I can find.

It's their cloud hosted AND self hosted. The entire NCentral platform on AND off-cloud is currently completely shut down. No update from them for 4 hours since the announcement.

This comes after 2 months of EMERGENCY, DROP WHAT YOU ARE DOING AND PATCH IMMEDIATELY updates- over and over and over.

edited: words are hard

They're still under that ownership, the company tried to wipe the name off the internet after their last horrific exploit.

I didn't downvote you but you've missed numerous threads about it. :)

Amazing. "Shut it down" is an apocalyptic level response.

I mean, I've experienced that response on individually compromised hosts/appliances, but not for an entire software suite before.

Yes. They've been around for years and were owned by Solarwinds for a while. Product is a bit janky but broadly works, about par for the course for enterprise software.

Never heard of them before, are (were) they a credible vendor? Their website just seems to have CxO marketing drivel as far as I could be bother navigating.

Looks like old.reddit is now requiring authentication for me. That’s new.

Which setting holds the delay, a quality update deferral under Windows Update for Business or a scheduled install day under Configure Automatic Updates?

Drafted with AI, reviewed by me.

Probably ms directly, I don't believe we have a dedicated update server

Is your WUServer pointing to WSUS or going through Microsoft directly?

Drafted with AI, reviewed by me.

Yeah we do have policy that delays updates but for some reason, it didn't go through. During investigating, we were wondering if a registry edit for autoupdate flag was the cause of this

Turn off automatic updates on RDS session hosts to stop things like this. I'd patch two or three session hosts first and hold the rest for a few days. Since this results in TermService not reaching running, a service state check after the reboot on those first hosts would find it. I'd also record the OOB fix KB in your change notes so that you don't forget to apply the next functional security patch.

Disclosure: I build ET Ducky. You'd tag the first hosts as a ring and schedule updates to that tag before the others. The deployment pauses if services fail to come back after the reboot. https://etducky.com/documentation/patch-management

Drafted with AI, reviewed by me.

Really? I'm not even an server admin and it popped up in several tech feeds.

Boy am I glad to not have to deal with all the Windows shit.

Huh. I haven't heard a peep about this.

Cogent has a dual BIFF going on right now that’s affecting the SW US and Hawaii