Hot Topics

Active Directory

ADCS ESC13 Abuse Technique

ADCS ESC13 Abuse Technique

| | Active Directory, ADC, Cybersecurity, Privilege Escalation, research
It is possible to configure an Active Directory Certificate Services (ADCS) certificate template with an issuance policy having an OID group link to a given AD group. This configuration makes AD treat ...
Posts By SpecterOps Team Members - Medium

4 Key Takeaways from the BlackBerry Global Threat Intelligence Report

| | Active Directory, all posts, Cybersecurity, Data breaches, Threat Intel
The BlackBerry Global Threat Intelligence Report covers the ransomware landscape, specific attack patterns & summarizes actionable intelligence. The post 4 Key Takeaways from the BlackBerry Global Threat Intelligence Report appeared first on ...
Blog | Enzoic
AD CS Attack Paths in BloodHound

ADCS Attack Paths in BloodHound — Part 1

| | Active Directory, ADC, BloodHound, Cybersecurity, research
ADCS Attack Paths in BloodHound — Part 1Since Will Schroeder and Lee Christensen published the Certified Pre-Owned whitepaper, the BloodHound Enterprise team at SpecterOps has been eager to implement Active Directory Certificate Services (ADCS) attack ...
Posts By SpecterOps Team Members - Medium
2023 unsafe passwords

Enzoic for AD Lite Data Shows Increase in Crucial Risk Factors

| | Active Directory, all posts, Cybersecurity, Data breaches, Password Security
The 2023 data from Enzoic for Active Directory Lite (also known as Enzoic for AD Lite) data from 2023 offers a revealing glimpse into the current state of cybersecurity, highlighting a significant ...
Blog | Enzoic

The Cracks in Microsoft’s Entra ID

| | Active Directory, Azure AD, Password Security
Microsoft's Entra ID, previously known as Azure Active Directory Password Protection might not be enough to protect your passwords. The post The Cracks in Microsoft’s Entra ID appeared first on Enzoic ...
Blog | Enzoic
Cypher Queries in BloodHound Enterprise

Cypher Queries in BloodHound Enterprise

| | Active Directory, active directory security, attack-path-management, BloodHound, bloodhound-enterprise
BloodHound Enterprise (BHE) recently saw the addition of a new, game-changing feature: open-ended Cypher searches. For those unfamiliar, Cypher is a declarative query language used for retrieving data from a graph database ...
Posts By SpecterOps Team Members - Medium
bypass MFA

Debunking MFA Myths: How to Stay Secure

| | , Active Directory, Cybersecurity, Data breaches
When discussing authentication security, Multi-Factor Authentication (MFA) has been widely touted as a linchpin for securing digital assets. However, as recent trends and reports suggest, MFA, while significant, is not the panacea ...
Blog | Enzoic
A spreadsheet list of integration commands you can use to build a phishing playbook using Office 365, CrowdStrike, Active Directory, Checkpoint, and Recorded Future

How to Build a Phishing Playbook Part 1: Preparation

| | Active Directory, Checkpoint Firewall, CrowdStrike, Cybersecurity, Incident Response, Office 365 Integration, OSINT, Phishing Attacks, Recorded Future, SOAR, SOAR platform
Automating response to phishing attacks remains one of the core use-cases of SOAR platforms. In 2022, the Anti-Phishing Working Group (APWG) logged ~4.7 million phishing attacks. Since 2019, the number of phishing ...
D3 Security

How to manage Active Directory Migration Tools: A Comprehensive Guide

| | Active Directory
In this article, we will discuss some of the best tips and advice on how you can manage migration tools. We will begin the article with an introduction on what these tools ...
Journal | LogonBox

Microsoft Patch Releases: Safeguarding Against Flaws

| | Active Directory, Brute-Force Mitigation, CVE-2023-36563, CVE-2023-41763, Cybersecurity Best Practices, Cybersecurity News, Hybrid Environments, Microsoft patch tuesday, Network Security, patch management, security updates, VBScript, Vulnerability Management, Windows security, zero-day exploits, zero-day vulnerabilities
Microsoft published its monthly Patch Tuesday updates in October 2023, resolving a total of 103 vulnerabilities across its platforms. In the wild, two of these issues were actively exploited. In this blog, ...
TuxCare
Load more