:

MICROSOFT CONFIRMS DOMAIN CONTROLLER LOOKUP BUG

AI DESK1 MIN READ
TUE, MAY 26, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Microsoft has identified a new issue in Windows Server 2016 where domain controller lookups fail following installation of the KB5087537 May 2026 security update. The bug affects system authentication and network connectivity.

The vulnerability emerges after systems apply the latest monthly security patch, preventing servers from locating and connecting to domain controllers. This breaks core Active Directory functionality that enterprises rely on for user authentication and resource access. Windows Server 2016 users who have installed KB5087537 may experience login failures, group policy application issues, and inability to access domain resources. The problem appears widespread across affected deployments. Microsoft has acknowledged the issue in its known issues documentation but has not yet released a fix or workaround. IT administrators managing Windows Server 2016 infrastructure should assess their exposure and consider delaying the security update deployment pending a resolution. The company typically addresses such critical issues through emergency patches or cumulative updates. Further details on remediation timelines are expected in coming communications from Microsoft support channels.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.

9H AGOIndustry Desk

Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.

9H AGOSecurity Desk

Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.

9H AGOIndustry Desk

Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.

9H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.