active directory

Microsoft Defender for Identity Flaw (CVE-2025-26685) Allows Unauthenticated Privilege Escalation

• Vulnerability Report

Microsoft Defender for Identity Flaw (CVE-2025-26685) Allows Unauthenticated Privilege Escalation

Do Son June 15, 2025 0

Researchers at NetSPI detailed a spoofing vulnerability (CVE-2025-26685) in Microsoft Defender for Identity (MDI). This flaw, while...

Read More Read more about Microsoft Defender for Identity Flaw (CVE-2025-26685) Allows Unauthenticated Privilege Escalation

Zero-Day Alert: Remotely Escalate Privileges to SYSTEM via Kerberos Relay – PoC Available

• Vulnerability

Zero-Day Alert: Remotely Escalate Privileges to SYSTEM via Kerberos Relay – PoC Available

Do Son June 12, 2025 0

A newly disclosed vulnerability, CVE-2025-33073, revealed by RedTeam Pentesting GmbH, exposes a critical flaw in Microsoft Windows’...

Read More Read more about Zero-Day Alert: Remotely Escalate Privileges to SYSTEM via Kerberos Relay – PoC Available

Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory

• Vulnerability Report

Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory

Do Son June 6, 2025 0

A newly published report by Antoine Cauchois, Staff Research Engineer at Tenable, reveals a stealthy persistence technique...

Read More Read more about Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory

Windows Server 2025 “BadSuccessor” Flaw Allows Domain Takeover (PoC Available, No Patch)

• Vulnerability

Windows Server 2025 “BadSuccessor” Flaw Allows Domain Takeover (PoC Available, No Patch)

Do Son May 27, 2025 0

Akamai security researcher Yuval Gordon has uncovered an Active Directory privilege escalation vulnerability in Windows Server 2025,...

Read More Read more about Windows Server 2025 “BadSuccessor” Flaw Allows Domain Takeover (PoC Available, No Patch)

Microsoft Issues Guidance to Combat Rising Kerberoasting Attacks

• Technology
• Windows

Microsoft Issues Guidance to Combat Rising Kerberoasting Attacks

Do Son October 13, 2024 0

Microsoft has released new guidance to help organizations defend against Kerberoasting attacks, a growing threat to Active...

Read More Read more about Microsoft Issues Guidance to Combat Rising Kerberoasting Attacks

Zyxel Devices Targeted by Malicious Actors: Urgent Firmware Update Required

• Vulnerability

Zyxel Devices Targeted by Malicious Actors: Urgent Firmware Update Required

Do Son October 10, 2024 0

A recent security announcement from security researcher Serhii Boiarynov at the Zyxel EMEA team has uncovered malicious...

Read More Read more about Zyxel Devices Targeted by Malicious Actors: Urgent Firmware Update Required

Akira Goes Stealthy: Ransomware Group Prioritizes Data Theft for Extortion

• Malware

Akira Goes Stealthy: Ransomware Group Prioritizes Data Theft for Extortion

Do Son December 21, 2023 0

In the dynamic world of cybersecurity, the Akira ransomware stands out as a formidable adversary. First gaining...

Read More Read more about Akira Goes Stealthy: Ransomware Group Prioritizes Data Theft for Extortion