Tag

#Kerberos

2 results in the archive.

Threat ActorOct 30, 2026

Examining ESC1 & ESC8: Help Desk Impersonation to AD CS Abuse

New intrusion paths ESC1 and ESC8 reveal attackers leveraging help desk impersonation for remote access, runtime code execution, and Certificate Services abuse through authentication relay and Kerberos techniques.

#Active Directory #Certificate Services #Kerberos

Read analysis

VulnerabilityJul 25, 2026

Certighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllers

The Certighost exploit enables low-privileged Active Directory users to obtain Domain Controller certificates and authenticate as domain controllers, risking critical Kerberos credential compromise.

#Active Directory #Kerberos #DCSync

Read analysis