Tag: Active Directory
CISA red team drill breaches two, only one defender notices
CISA red team assessments fully breached two critical infrastructure organizations, and only the water utility noticed.
Certighost exploit opens Active Directory certificate services to domain takeover
Researchers released a Certighost exploit for a critical AD CS flaw that lets authenticated users escalate privileges to full domain…
Standard users can forge domain credentials through Certighost AD certificate bug
A newly patched Active Directory flaw let standard domain users impersonate domain controllers and forge authentication tokens.
Microsoft patches record 622 flaws including two zero-days under attack
Microsoft's July 2026 Patch Tuesday fixes 622 CVEs including exploited SharePoint and AD FS zero-days
SEO Poisoning Attack via Bing Leads to Akira Ransomware Deployment
Attackers manipulated Bing search results to deliver a trojanized ManageEngine OpManager installer, leading to network wide encryption by Akira ransomware…
FortiBleed Campaign Exploits 73,000 Fortinet Firewalls Across 194 Countries
A vast automated campaign attributed to Russian speaking actors has compromised Fortinet firewalls globally by leveraging stolen credentials harvested by…