Abhilash
ManageEngine Blog

IT security under attack blog series: Instant domain persistence by registering a rogue domain controller

IT security under attack blog series: Instant domain persistence by registering a rogue domain controller

| | Active Directory, Cybersecurity, IT Security, Log360, Privilege Escalation, security breaches
In this blog in the IT security under attack series, we will learn about an advanced Active Directory (AD) domain controller (DC) attack to obtain persistence in AD environments. Dubbed DCShadow, this is a late-stage kill chain attack that … The post IT security under attack blog series: Instant domain ... Read More
ManageEngine Blog
Password spray attack on Active Directory users

Is IT security under attack?

| | Active Directory, Azure Active Directory, Cyber Security, cyberattacks, IT Security, Log360, Privilege Escalation, security breach, Windows security
From credential theft to network vulnerability exploitation and ransomware incidents on highly secure organizations, the year 2020 has been surprisingly rough on IT security. In the wake of the COVID-19 pandemic, companies around the world are reporting more cyberattacks than … The post Is IT security under attack? appeared first on ManageEngine ... Read More
ManageEngine Blog
Domain controller patch alert! Vulnerability grants domain admin access in 10 seconds

Domain controller patch alert! Vulnerability grants domain admin access in 10 seconds

| | active directory security, critical vulnerability, Domain Controller, IT Security, Log360, Privilege escalation attacks, Windows security
A critical Active Directory vulnerability (CVE-2020-1472)   has been making headlines for being the most notorious elevation of privilege bug because it can affect all computers and domain controllers in an organization.  This high-risk vulnerability, dubbed Zerologon, gives threat actors … The post Domain controller patch alert! Vulnerability grants domain admin ... Read More
ManageEngine Blog
DCsync attack on Active Directory (AD)

Advanced Active Directory attacks: Simulating domain controller behavior

| | Active Directory, Cybersecurity, Domain Controller, Endpoint security, Insider Attacks, IT Security, password attacks, Privilege Escalation, security breach
There was a time when cyberattacks on identity and authentication infrastructures [like Active Directory (AD)] were immensely challenging to perform. A lot of forethought had to be put into devising a plan for the careful execution of attacks, and advanced … The post Advanced Active Directory attacks: Simulating domain controller ... Read More
ManageEngine Blog