Blog
Insights on identity risk, attack paths, compliance, and security operations strategy - from the Forestall research team.
Featured Articles
Threat AnalysisAug 13, 2026
SCCM Console Extension Chain (CVE-2026-47301): From Domain User to SYSTEM on the Site Server
Active DirectoryAug 7, 2026
KerberLoss (CVE-2026-25177): Invisible Unicode in Service Principal Names for DoS, Kerberos Downgrade, and SPN-Jacking
Active DirectoryAug 7, 2026
ResetNightmare (CVE-2026-27912): Full Domain Takeover Through the Kerberos Change Password Protocol
Threat AnalysisAug 13, 2026
SCCM Console Extension Chain (CVE-2026-47301): From Domain User to SYSTEM on the Site Server
Active DirectoryAug 7, 2026
KerberLoss (CVE-2026-25177): Invisible Unicode in Service Principal Names for DoS, Kerberos Downgrade, and SPN-Jacking
Active DirectoryAug 7, 2026
ResetNightmare (CVE-2026-27912): Full Domain Takeover Through the Kerberos Change Password Protocol
Active DirectoryJul 25, 2026
Certighost (CVE-2026-54121): Detecting an AD CS Domain Controller Impersonation Without Exploiting It
Best PracticesJul 9, 2026
Increasing Identity Resilience: Disabling RC4 and Enforcing AES with a Step-by-Step Guide
Active DirectoryJun 23, 2026
Onelogon: Taking Over Active Directory Accounts by Bypassing the Zerologon Patch
Identity SecurityJun 22, 2026
Extracting Azure Managed Identity Tokens From Azure SQL Database
Best PracticesApr 13, 2026
Increasing Identity Resilience: Disabling NTLMv1 with a Step-by-Step Guide
Active DirectoryJun 10, 2025
CVE-2025-33073: A New Technique for Reflective NTLM Relay Attack
Active DirectoryMay 23, 2025
Privilege Escalation by Abusing dMSA: The BadSuccessor Vulnerability
Active DirectoryOct 08, 2024
Understanding ESC15: A New Privilege Escalation Vulnerability in Active Directory Certificate Services (ADCS)
Attack PathsFeb 27, 2022
Combined Attack Path Analysis with BloodHound and Kangal
Threat AnalysisMay 20, 2021
How to Secure Kerberos Authentication Protocol
Best PracticesMar 15, 2021
How to Secure Active Directory Service Accounts
Get insights for your environment.
Start with a 1-day Proof of Value in your own environment.