MIT releases krb5 1.22.3 with fixes for 21 CVEs
The post points to advisory MITKRB5-SA-2026-001 but does not list CVE ids or impacts.
Stories per day · 30 days
2 RSS
10 stories, newest first · one card per story
Stories tagged #kerberos
Why Active Directory weaknesses stay open for years in teams with one or two admins
intcube led 27 municipalities through a 12-week program to harden Windows Server and Active Directory.
2
Trust a Few: The Weakest Assumptions a Protocol Needs
A verifier loop computes the weakest key, value, and channel assumptions a protocol needs to meet a goal.
Hackers Steal NTDS.dit to Dump Active Directory Password Hashes and Forge Golden Tickets
Trellix details how attackers dump the NTDS.dit Active Directory database via shadow copies to harvest NTLM hashes and forge persistent Golden Tickets.
4
One Stolen Active Directory File Can Expose Credentials for an Entire Windows Domain
Trellix warns that stealing a domain controller's NTDS.dit and SYSTEM hive can expose an entire Windows domain's credentials.
2
CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory
CISA and five international agencies publish joint guidance detailing 17 techniques attackers use to compromise Microsoft Active Directory environments.
2
Hackers Steal Active Directory Password Hashes Without Attacking Domain Controllers Directly
Attackers use the DCSync technique to impersonate domain controllers and harvest AD password hashes and Kerberos keys without directly compromising domain controllers, Trellix warns.
3
Hackers Pose as Domain Controllers to Steal Active Directory Password Hashes
Attackers abuse Active Directory replication (DCSync) via the DRSUAPI protocol to steal password hashes and forge Golden Tickets for persistent domain compromise.
5
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor
Microsoft's September 2026 Patch Tuesday delivers a record patch count, fixing two exploited zero-days and a wormable DNS flaw dubbed a SigRed successor.
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Critical FreeIPA flaw chain (CVE-2026-76578, CVSS 9.8) lets anonymous clients create reusable admin credentials on default installs; fixed in 4.13.4.