active-directory

2 articles · newest first

Software

Any employee's login can now become domain admin — and the exploit code is already public

A low-privileged Active Directory account is all it takes to forge a Domain Controller certificate — Microsoft patched it in July, and a working exploit just landed on GitHub.

Priya Nair · Aug 1 · 6 min

Software

a Windows AD FS zero-day is being exploited to escalate privileges — CVE-2026-56155, patch now

Microsoft confirmed CVE-2026-56155 in Active Directory Federation Services is being exploited in the wild. If AD FS underpins your single sign-on, this is a priority fix.

Priya Nair · Jul 31 · 10 min