Cybersecurity

Certighost exploit lets low‑privileged AD users impersonate DC

Researchers reveal the Certighost exploit, letting low‑privileged Active Directory users obtain Domain Controller certificates and bypass Kerberos defenses.