active directory security

How to Audit Your Environment for RC4 Encryption

How to Audit Your Environment for RC4 Encryption

| | active directory security, Community Tools, Rc4
Microsoft is deprecating RC4 encryption beginning in April 2026. This post explains the process—and points you to resources that can help. The post How to Audit Your Environment for RC4 Encryption appeared ...
Semperis
Windows Admin Center dashboard

What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)

| | #Windows Admin Center, active directory security, CVE-2026-20929, CVE-2026-26119, Identity Threat Detection & Response, Threat Research
Learn about the discovery of CVE-2026-26119: why it worked and why you shouldn't underestimate authentication reflection. The post What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119) appeared first ...
Semperis

When Is WinRM Over HTTP Secure?

| | Active Directory, active directory security, ad security
Is use of the Windows Remote Management (WinRM) protocol over HTTP inherently bad? Take a nuanced look at why "HTTP = insecure" isn't the whole story—and when HTTPS can actually introduce risk ...
Semperis

What You’re Missing: Proper LAN Manager Authentication Levels

| | Active Directory, active directory security, ad security, AD Security 101
One of the most common misconfigurations I encounter in Active Directory environments is a LAN Manager authentication level set to 2 on domain controllers (DCs). If your reason for staying at level ...
Semperis

LDAP, LDAPS, and Active Directory

| | active directory security, ldap, LDAPS
Almost every AD security assessment, penetration test, or architecture conversation ends up containing the recommendation to “switch from unsecured LDAP to LDAPS” for your Active Directory (AD). Working for a software vendor ...
Semperis
25 Years of AD Breaches: Three Moves to Transform Incident Response

25 Years of AD Breaches: Three Moves to Transform Incident Response

| | Active Directory, active directory security, ad security, Hybrid Identity Protection, Identity Threat Detection & Response, ITDR
Active Directory is attackers’ favorite path to domain dominance. Learn how mapping your defenses to the NIST Cybersecurity Framework can improve cyber incident response and recovery. The post 25 Years of AD ...
Semperis
ImmutableID and hard matching - syncjacking

SyncJacking: Hard Matching Vulnerability Enables Entra ID Account Takeover

| | active directory security, Entra ID, Hybrid Identity Protection, Identity Threat Detection & Response, SyncJacking, Threat Research
Attackers with certain privileges can abuse Entra Connect hard matching synchronization to take over synchronized Entra ID accounts. The post SyncJacking: Hard Matching Vulnerability Enables Entra ID Account Takeover appeared first on ...
Semperis

Best Cybersecurity Conferences for Identity Security Professionals in 2026

| | active directory security, ad security, Hybrid Identity Protection, Identity Threat Detection & Response, ITDR
For anyone safeguarding hybrid identity systems, continuous learning and cyber community engagement are critical. Here are our top picks for conferences that deliver a laser-focus on identity security—and the technical knowledge you ...
Semperis
What CISOs Need to Know About Fighting Ransomware in 2026

What CISOs Need to Know About Fighting Ransomware in 2026

| | active directory security, ad security, ADFR, From the Front Lines, Hybrid Identity Protection, Identity Threat Detection & Response, ITDR, Purple Knight, The CISO's Perspective
The fastest way to turn a cyber incident into a business outage is through identity system compromise. Ransomware continues to exploit that fact—and the consequences are real. Here are practical, board-ready steps ...
Semperis
Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation

Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation

| | Active Directory, active directory security, ad security, Identity Threat Detection & Response, ITDR, Threat Research, Uncategorized
When misconfigured Service Principal Names (SPNs) and default permissions align, attackers can exploit Kerberos reflection to gain SYSTEM-level access remotely. Even with Microsoft’s security update, Ghost SPNs can still haunt you. Learn ...
Semperis
Load more