2.5 Admins 201: CVEs everywhere

Vulnerabilities in Asus hardware make us think there should be some regulations about what can be sold as a router, a VPN feature that we hadn’t heard of is removed from Windows, and why we don’t believe that Microsoft will ever take security as seriously as they claim.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

High-severity vulnerabilities affect a wide range of Asus router models

Dear Asus router user: You’ve been pwned, thanks to easily exploited flaw

Microsoft to remove DirectAccess from Windows, recommends switching to Always On VPN

Microsoft fixes hack-me-via-Wi-Fi Windows security hole

CVE-2024-30078

Microsoft in damage-control mode, says it will prioritize security over AI

Pluralistic: Microsoft pinky swears that THIS TIME they’ll make security a priority

Tailscale

Tailscale is an easy to deploy, zero-config, no-fuss VPN that allows you to build simple networks across complex infrastructure. Go to tailscale.com/25a and try Tailscale out for free for up to 100 devices and 3 users, with no credit card required.

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.