SecurityThe Hacker Newsabout 3 hours ago
Certighost Exploit Impersonates Domain Controller
1 min read
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. Microsoft patched the AD CS issue ten days earlier as CVE-2026-54121 with a CVSS score of 8.8. The exploit automates the chain to retrieve the krbtgt secret through DCSync.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
