#directory

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Jul 24, 2026 // 17:52

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain […]

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Jul 13, 2026 // 14:04

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. “The script looked […]

The Replicant in Your Directory: AI Agents and the Identity Security Gap

Jul 10, 2026 // 17:16

By Grady Summers, CEO, Netwrix Security was built for people. AI agents are exposing the gap. Forty-four years after Blade Runner imagined replicants walking among […]

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

May 27, 2026 // 18:54

Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to OX Security, the package, named […]

Can you enforce strong Active Directory password rules without frustrating users?

May 27, 2026 // 17:16

Protecting Active Directory (AD) accounts starts with strong password policies, backed by consistent enforcement across the organization. However, make the rules too weak and you […]

Why Changing Passwords Doesn’t End an Active Directory Breach

May 11, 2026 // 16:56

Password resets are often the first response to a suspected compromise. It makes sense; resetting credentials is a quick way to cut off an attacker’s […]