Cybersecurity articles tagged #Active Directory on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/certighost-exploit-domain-controller-impersonation-via-active-directory-certificateshttps://runtimerebel.com/blog/certighost-exploit-domain-controller-impersonation-via-active-directory-certificatesThe Certighost exploit enables low-privileged Active Directory users to obtain domain controller certificates, authenticate as DCs, and retrieve the krbtgt secret for…Fri, 24 Jul 2026 17:40:50 GMTCertighostActive DirectoryDomain ControllerPrivilege EscalationDCSyncKerberosCertificateshttps://runtimerebel.com/blog/microsoft-zero-days-active-directory-sharepoint-exploitedhttps://runtimerebel.com/blog/microsoft-zero-days-active-directory-sharepoint-exploitedMicrosoft addresses 622 vulnerabilities, including two actively exploited zero-days in Active Directory and SharePoint Server.Wed, 15 Jul 2026 02:35:14 GMTMicrosoftActive DirectorySharePoint ServerZero-DayPatch TuesdayVulnerabilityhttps://runtimerebel.com/blog/ai-built-ransomware-toolkit-automates-edr-evasion-ad-discoveryhttps://runtimerebel.com/blog/ai-built-ransomware-toolkit-automates-edr-evasion-ad-discoveryNew AI-powered ransomware toolkit automates Active Directory discovery and EDR evasion, posing advanced threats. Learn its capabilities and mitigation strategies.Tue, 02 Jun 2026 21:09:58 GMTRansomwareAIEDR EvasionActive DirectoryToolkitThreat Intelligencehttps://runtimerebel.com/blog/cve-2020-1472-how-attackers-exploit-windows-netlogon-rce-patch-nowhttps://runtimerebel.com/blog/cve-2020-1472-how-attackers-exploit-windows-netlogon-rce-patch-nowThreat actors are actively exploiting Zerologon (CVE-2020-1472), a critical Windows Netlogon RCE vulnerability that allows for full domain takeover.Mon, 01 Jun 2026 14:14:13 GMTCVE-2020-1472ZerologonMicrosoftActive DirectoryDomain Controllerhttps://runtimerebel.com/blog/optimizing-active-directory-security-with-modern-password-policieshttps://runtimerebel.com/blog/optimizing-active-directory-security-with-modern-password-policiesLearn how to implement NIST-compliant Active Directory password policies using passphrases and breached password protection to reduce identity-based risks.Wed, 27 May 2026 17:12:24 GMTActive DirectoryPassword SecurityNist GuidelinesCredential Protectionhttps://runtimerebel.com/blog/windows-server-2016-dc-lookup-failures-kb5037763-mitigation-guidehttps://runtimerebel.com/blog/windows-server-2016-dc-lookup-failures-kb5037763-mitigation-guideMicrosoft confirms a regression in Windows Server 2016 causing LSASS crashes and domain controller lookup failures after the May 2024 security update.Tue, 26 May 2026 09:19:29 GMTWindows Server 2016Lsass CrashKb5037763Active DirectoryMicrosoft Patchhttps://runtimerebel.com/blog/active-directory-post-breach-persistence-why-password-resets-failhttps://runtimerebel.com/blog/active-directory-post-breach-persistence-why-password-resets-failExplaining why password resets fail to evict attackers from Active Directory due to Kerberos ticket persistence and MSV1_0 credential caching mechanisms.Mon, 11 May 2026 17:01:15 GMTActive DirectoryKerberosPersistenceKrbtgtIncident Responsehttps://runtimerebel.com/blog/microsoft-releases-oob-updates-to-fix-windows-server-boot-issueshttps://runtimerebel.com/blog/microsoft-releases-oob-updates-to-fix-windows-server-boot-issuesMicrosoft issues emergency out-of-band updates to resolve critical authentication failures and boot loops caused by the April 2026 security patches.Mon, 20 Apr 2026 08:53:35 GMTWindows ServerOut of Band UpdateActive DirectoryPatch ManagementAuthenticationhttps://runtimerebel.com/blog/windows-server-domain-controllers-hit-by-lsass-reboot-loopshttps://runtimerebel.com/blog/windows-server-domain-controllers-hit-by-lsass-reboot-loopsMicrosoft confirms LSASS crashes causing persistent reboot loops on Windows Server Domain Controllers following the April 2024 security update cycle.Fri, 17 Apr 2026 08:42:20 GMTWindows ServerLsassKb5036909Domain ControllerActive Directoryhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionComprehensive guide on hardening against destructive cyberattacks, including wipers, ransomware, and data destruction tactics across on-premises and cloud environments.Fri, 06 Mar 2026 16:26:03 GMTDestructive AttacksWiper MalwareRansomwareHardeningCyber ResilienceMFABackupActive DirectoryKubernetesCI CDCloud SecurityNetwork Segmentation