A domain controller is a server that processes authentication requests from users and computers within a computer domain. Domain controllers are most commonly used in Windows Active Directory (AD) ...

In two previous articles (here and here) I shared some classic Active Directory mistakes people have made that got their companies into serious trouble. Here’s another mistake that on the face of it ...

Attackers exploited PaperCut MF zero-days to compromise a print server, deploy malware and reach an Active Directory domain controller.

Threat actors are increasingly abusing Active Directory replication to impersonate domain controllers and steal password hashes from enterprise networks. This technique, known as a DCSync attack, can ...

An authenticated low-privilege attacker can execute arbitrary commands as SYSTEM on the Primary Domain Controller Emulator through the AD Events Listener — and the fix requires more than a patch.

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine ...