CVE-2025-21293 PoC Exploit Code Released

CVE-2025-21293 PoC Exploit Code Released

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from excessive permissions granted to the Network Configuration Operators group, which can be…
Silver SAML Attack Dissection

Silver SAML Attack Dissection

Golden SAML attack, if you remember SolarWinds attack that affected organizations around the world that deployed malicious code into Orion IT management and monitoring software. To mitigate or overcome this,…
DFSCoerce – NTLM Relay Attack

DFSCoerce – NTLM Relay Attack

Researchers has published a new DFSCoerce Windows NTLM relay attack that uses MS-DFSNM (Microsoft’s Distributed File System) to take over Windows domains. Microsoft Active Directory Certificate Services (ADCS) is a…
Microsoft Urges to Patch AD Vulnerability

Microsoft Urges to Patch AD Vulnerability

Microsoft released an alert on two AD vulnerabilities addressed with the November 2021 Patch Tuesday, urging customers to install the available patches as soon as possible, to prevent potential compromise.…