Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Windows 11 KB5124008 Active Directory domain trust breakage

Service Disruption
First reported
Last updated
Happening score
H score 0
1 unique sources, 2 articles

Summary

Hide ▲

The Windows 11 KB5124008 security update is breaking Active Directory domain trust on some enterprise systems, preventing valid users from signing in after reboot. Microsoft is investigating the disruption, and affected machines may lose their secure channel with domain controllers. Some administrators have temporarily restored access by changing Machine Identity Isolation settings and repairing the secure channel.

Related Happenings

Microsoft Entra ID adds CSP enforcement to block script injection during sign-ins

Security Tool/Service
H score28 First: 30.09.2026 16:37 Last: 30.09.2026 16:37 Sources 1

About this happening: Microsoft Entra ID is rolling out Content Security Policy (CSP) enforcement for browser-based sign-ins, blocking external script injection and reducing XSS-driven creden...

Open Happening

Microsoft Windows 11 September 2026 updates break Always On VPN connections

Service Disruption
H score0 First: 23.09.2026 14:18 Last: 23.09.2026 14:18 Sources 1

About this happening: Microsoft's September 2026 Windows 11 security updates are disrupting Always On VPN connections, leaving some enterprise users stuck in "Connecting" or seeing "T...

Open Happening

TrustSink rogue external MFA provider attack against Microsoft Entra

Technical Analysis
H score30 First: 23.09.2026 00:45 Last: 23.09.2026 00:45 Sources 1

About this happening: Researchers demonstrated TrustSink, a post-compromise technique that abuses Microsoft Entra external MFA providers to capture passwords during legitimate sign-ins, creatin...

Open Happening

Windows Server Remote Desktop Services disruption after September 2026 cumulative updates

Service Disruption
H score0 First: 10.09.2026 23:34 Last: 10.09.2026 23:34 Sources 1

About this happening: Windows Server Remote Desktop Services is experiencing a service disruption after the September 2026 cumulative updates, leaving some systems unable to accept new conn...

Latest development: 14.09.2026 23:52

Microsoft released out-of-band Windows updates on September 14, 2026, to fix Remote Desktop Services failures on affected Windows Server and Windows client systems after September 2026 security updates caused RDP connection and sign-in failures and, in some cases, unresponsive servers. The company also said it had previously provided Group Policy mitigations while it worked on a permanent fix.

Open Happening

Microsoft Windows passkey relay mitigation for CVE-2026-34348

Advisory/Mitigation
H score31 First: 10.08.2026 15:25 Last: 10.08.2026 15:25 Sources 1

About this happening: Microsoft's CVE-2026-34348 mitigation for Windows Event Logging Service and the reported passkey relay assertions issue reduces exposure to replay-style authentication...

Open Happening

Timeline

  1. 17.09.2026 11:24 1 articles · 13d ago

    Microsoft shares workaround for Windows 11 Machine Identity Isolation domain login failures

    Mitigation Patch Update

    Microsoft shared a temporary workaround for Windows 11 systems where the September 2026 security updates trigger Machine Identity Isolation enforcement and break domain trust and valid credential sign-ins on enterprise devices. Admins should disable Machine Identity Isolation using the same method used to enable it, restart the device, and reset the secure channel; Microsoft also says the feature is only supported in environments connected to Windows Server 2025 Domain Functional Level (DFL) and above.

    Show sources
    Open in new tab
  2. 16.09.2026 23:39 2 articles · 13d ago

    Microsoft investigates Windows 11 KB5124008 domain trust failures

    Initial Disclosure

    Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users with valid Active Directory credentials from logging in after reboot. Administrators say affected computers lose their secure channel with Active Directory after the update is installed and devices restart, and some reports link the failures to Windows Machine Identity Isolation in audit or enforcement mode.

    Show sources
    Open in new tab