cognitive cybersecurity intelligence
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.
They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
An alert issued earlier this year was updated, providing more guidance on Iranian-linked cyber activity.
Fake Claude Desktop Ads Hit 29 Organisations With Data-Stealing Malware TechRound
The risk of guardrail-free AI isn’t a future concern — it’s a current-day threat.
Hackers hid dangerous malware on a page hidden in Anthopic’s Claude.ai domain TechRadar
