Lmst

RC4-Deaktivierung – so müssen Sie jetzt handeln

Die Ära von RC4 neigt sich rapide dem Ende zu. Sind Sie darauf vorbereitet? Wissen Sie, was zu tun ist, um Ihre Server sicherer zu machen? Und wissen Sie auch, wie AD-Umgebungen darüber hinaus umfassend „gehärtet” werden?

Die Antworten bekommen Sie bei den „Hardening Insights”!

Freitag 13. März 2026, um 13:00 Uhr Sie dauert etwa 20 bis 30 Minuten. Die Teilnahme ist wie immer kostenlos.

https://www.all-about-security.de/rc4-deaktivierung-so-muessen-sie-jetzt-handeln/

#RC4 #microsoft

#MSXFAQ Kerberos #RC4 Abschaltung https://www.msxfaq.de/windows/kerberos/kerberos_rc4_abschaltung.htm - Kleines wichtiges Update. Neuer Default ist AES ab 1. April und ab Juli ist es dann unumkehrbar. Problem, wenn Sie RC4 manuell bislang erzwingen oder ihr letzter KRBTGT-Kennwort-Change vor ihrem Windows 2008 DCs erfolgte

If you have a third-party device that doesn't support AES-SHA1, reach out to stillneedrc4@microsoft.com with information about the device and scenario.

🔗 https://learn.microsoft.com/en-us/windows-server/security/kerberos/detect-remediate-rc4-kerberos#:~:text=If%20you%20have%20a%20third%2Dparty%20device%20that%20doesn%27t%20support%20AES%2DSHA1%2C%20reach%20out%20to%20stillneedrc4@microsoft%2Ecom%20with%20information%20about%20the%20device%20and%20scenario%2E

#RC4 #AES #Kerberos #SessionTicket #TGT

#Microsoft startet mit Identifizierung von unsicherer #RC4-Verschlüsselung | Security https://www.heise.de/news/Microsoft-startet-mit-Identifizierung-von-unsicherer-RC4-Verschluesselung-11145332.html #Kerberos #patchday

#Microsoft will unsichere #RC4-#Verschlüsselung loswerden | Security https://www.heise.de/news/Microsoft-fegt-RC4-Reste-in-Kerberos-aus-11117992.html #encryption #Kerberos

It remains a difficult phenomenon to truly understand: #opensource or #digitalcommons are often kept out with great conviction, justified by claims of immature #security and unacceptable risk.

Yet that same conviction is rarely seen when consensus relies on decades-old security components that have caused harm for over 30 years.

Security, then, seems less a principle than a convenient argument used when it suits other interests.

#rc4

https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/

Microsoft Is Finally Killing RC4

After twenty-six years, Microsoft is finally upgrading the last remaining instance of the encryption algorithm RC... https://www.schneier.com/blog/archives/2025/12/microsoft-is-finally-killing-rc4.html

#AppliedCryptography #Uncategorized #algorithms #encryption #Microsoft #Windows #RC4

🌗 微軟終將淘汰造成數十年危害的過時加密演算法
➤ 遲來但必要的修正：微軟終結數十年安全隱患
✤ https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/
微軟在歷經逾十年的駭客攻擊及來自美國參議員的嚴厲批評後，終於宣佈將淘汰 Windows 預設支援長達 26 年的過時且易受攻擊的 RC4 加密演算法。自 2000 年 Active Directory 推出以來，RC4 便一直是其管理員與使用者帳戶認證的預設安全機制，儘管其漏洞眾所周知，Windows 伺服器仍預設回應 RC4 認證請求，成為駭客長期利用的弱點，包括去年導致健康巨頭 Ascension 遭受重大攻擊的事件。微軟計畫在 2026 年年中前，更新 Windows Se
#網路安全 #加密技術 #微軟 #Windows Server #Active Directory #RC4 #AES #Kerberoasting #漏洞 #資訊科技政策

Ab Sommer 2026 wird #RC4 bei #Windows Server Domain Controllern aus Sicherheitsgründen standardmäßig deaktiviert.

https://borncity.com/blog/2025/12/18/windows-authentifizierung-microsoft-kappt-rc4-mitte-2025/

#Microsoft will finally kill obsolete cipher that has wreaked decades of havoc

https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/

#cybersecurity #RC4

#Microsoft Will Finally Kill an #Encryption #Cipher That Enabled a Decade of #Windows #Hacks

The weak #RC4 for administrative #authentication has been a #hacker holy grail for decades.
#privacy #security

https://www.wired.com/story/microsoft-will-finally-kill-an-encryption-cipher-that-enabled-a-decade-of-windows-hacks/

Just pushed by second git repository on #Codeberg: https://codeberg.org/maehw/rc4 -- it's a #Python3 command line tool to perform #RC4 (Rivest Cipher 4) stream cipher #encryption/#decryption/verification. I forked it from GitHub and extended it with command line arguments and file access.

#Microsoft will finally kill obsolete cipher that has wreaked decades of havoc
#RC4 #security #privacy

https://arstechnica.com/security/2025/12/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc/

#Microsoft Will Finally Kill Obsolete #Cipher That Has Wrecked Decades of Havoc-Slashdot

supported by default for 26 years following more than a decade of devastating #hacks that exploited it & recently faced blistering criticism from a prominent senator. When the software maker rolled out #ActiveDirectory in 2000, it made #RC4 a sole means of securing the #Windows component, which admins use to configure & provision fellow admin & user accts inside large orgs
#security

https://it.slashdot.org/story/25/12/15/2244255/microsoft-will-finally-kill-obsolete-cipher-that-has-wrecked-decades-of-havoc