Tag
3 results in the archive.
New intrusion paths ESC1 and ESC8 reveal attackers leveraging help desk impersonation for remote access, runtime code execution, and Certificate Services abuse through authentication relay and Kerberos techniques.
CISA's red team assessments identified significant detection and response weaknesses in IT, cloud, and OT environments, revealing misconfigured Active Directory and excessive cloud permissions.
The Certighost exploit enables low-privileged Active Directory users to obtain Domain Controller certificates and authenticate as domain controllers, risking critical Kerberos credential compromise.