Spyke
microsoft·MicrosoftbyUnLocoPoco

Certighost: A New AD CS Attack That Can Lead to Full Active Directory Compromise

cross-posted from: https://lemmy.world/post/49907053

A newly disclosed vulnerability in Active Directory Certificate Services (AD CS) shows just how dangerous certificate-based authentication can become when trust breaks down. Certighost (CVE-2026-54121) allows a low-privileged domain user, under specific conditions, to obtain a certificate for a Domain Controller, authenticate using PKINIT, and perform DCSync to retrieve the krbtgt secret, potentially leading to complete Active Directory compromise. Microsoft patched the flaw in its July 2026 security updates, but a public proof-of-concept is now available

Certighost: A New AD CS Attack That Can Lead to Full Active Directory Compromisehttps://thecybersecguru.com/news/certighost-cve-2026-54121-ad-cs-domain-controller-impersonation/Open linkView original on lemmy.world
3
microsoft·Microsoftbybunlee

openai with broadcom! the strategic move

San Francisco and Palo Alto—October 13, 2025—OpenAI and Broadcom today announced a collaboration for 10 gigawatts of custom AI accelerators. OpenAI will design the accelerators and systems, which will be developed and deployed in partnership with Broadcom. By designing its own chips and systems, OpenAI can embed what it’s learned from developing frontier models and products directly into the hardware, unlocking new levels of capability and intelligence. The racks, scaled entirely with Ethernet and other connectivity solutions from Broadcom, will meet surging global demand for AI, with deployments across OpenAI’s facilities and partner data centers.

View original on lemmy.zip
-3
microsoft·MicrosoftbyGerowen

Microsoft Forcibly Re-Enables CoPilot in the Outlook Mobile App After Every Update...

I have the Outlook Android app installed for work and I noticed 3 or 4 times lately that the "CoPilot" option kept getting re-enabled. So I decided to screen capture the update process today to see if that's what was triggering it.

This company is just so shady nowadays. I mean, they've never exemplified honesty, but come on now, reverting settings that users explicitly change? Get fucked Microsoft.

View original on lemmy.world
88