#Active Directory
All CosmicBytez Labs articles tagged #Active Directory, across news, security advisories, how-to guides, and projects.
- News
No Identity, No Recovery: Why Cyber Resilience Starts With IAM
A Dark Reading analysis argues identity resilience, not just data backups, determines whether enterprises can actually recover from an attack.
- News
Microsoft Shares Workaround for Windows Domain Login Issues
Microsoft confirms KB5124008 breaks AD domain login on some Windows 11 PCs and shares a registry workaround while a permanent fix is prepared.
- News
Aurora Ransomware Operators Use Cursor AI Against 10 Targets
Aurora ransomware operators used Cursor's agentic AI, running Claude Sonnet, to automate recon, lateral movement, and AD exploitation across 10 victims.
- Security
CVE-2026-11861: FreeIPA AD Trust Bypass Lets Attackers Impersonate Kerberos Clients
A CVSS 9.6 flaw in FreeIPA lets Active Directory users bypass authentication to FreeIPA services by impersonating client names in Kerberos TGT requests.
- Security
CVE-2026-56155: Microsoft AD FS Access Control Flaw Enables Golden SAML Attacks
Microsoft's July 2026 Patch Tuesday fixes CVE-2026-56155, an actively exploited privilege escalation flaw in Active Directory Federation Services....
- News
FortiBleed: 5-Stage Attack Chain Behind 110 Million Credential Heist on FortiGate Firewalls
Deep analysis of the FortiBleed operation reveals a sophisticated five-stage credential harvesting pipeline — custom Golang sniffers, Telegram-based...
- Security
CVE-2026-11374: ManageEngine SSO Ticket Prediction Enables Unauthenticated Account Takeover
A critical authentication vulnerability in four ManageEngine products allows unauthenticated attackers to predict SSO session tickets and take over...
- News
AI-Built Ransomware Toolkit Automates EDR Evasion and AD Discovery
A threat actor has deployed an AI-generated ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and…
- News
Can You Enforce Strong Active Directory Password Rules Without Frustrating Users?
Strong AD passwords don't have to mean frustrated users — passphrases, breached-password checks, and self-service resets balance security and usability.
- News
Microsoft: Domain Controller Lookup May Fail on Windows
Microsoft has confirmed a new known issue affecting Windows Server 2016 systems where domain controller lookups fail after installing the KB5087537 May 2026.
- News
Why Changing Passwords Doesn't End an Active Directory
Resetting compromised passwords is a natural first response to a breach, but it's not enough. Cached credentials, Kerberos ticket grants, and persistent...
- HOWTO
Domain Controller Hardening: Securing Active Directory
Comprehensive DC hardening guide covering tier model implementation, LDAP signing, NTLM restrictions, Kerberos hardening, AdminSDHolder, DSRM security,...
- HOWTO
Active Directory Health Check: Comprehensive Diagnostic
Run thorough health checks on Active Directory infrastructure including Domain Controllers, replication, DNS, SYSVOL, FSMO roles, and critical services...
- Project
Build an Active Directory Penetration Testing Lab
Create a fully functional Active Directory lab environment for practicing common attack techniques including Kerberoasting, AS-REP roasting,...
- HOWTO
Configuring Windows LAPS: Automated Local Admin Password
Deploy and configure Local Administrator Password Solution (LAPS) to automatically manage local administrator passwords across domain-joined computers,...
- HOWTO
Group Policy Security Hardening for Windows Environments
Implement CIS-aligned security baselines through Group Policy including password policies, account lockout, audit policies, restricted groups, AppLocker,...