Active Directory Security
Categories
- Active Directory Backup & Recovery (69)
- Active Directory Security (244)
- AD Security 101 (18)
- Agentic AI (13)
- Community Tools (26)
- Crisis Management (5)
- Directory Modernization (10)
- From the Front Lines (71)
- Hybrid Identity Protection (99)
- Identity Attack Catalog (32)
- Identity Security Research Library (10)
- Identity Threat Detection & Response (174)
- Our Mission: Be a Force for Good (15)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (19)
- Threat Research (91)
- Uncategorized (3)
What You’re Missing: Proper LAN Manager Authentication Levels
- Andrea Pierini
- Mar 11, 2026
One of the most common misconfigurations I encounter in Active Directory environments is a LAN Manager authentication level set to 2 on domain controllers (DCs). If your reason for staying at level 2 is legacy application compatibility, you can move to level 3 today without breaking those applications.
LDAP, LDAPS, and Active Directory
- Evgenij Smirnov
- Feb 13, 2026
Almost every AD security assessment, penetration test, or architecture conversation ends up containing the recommendation to “switch from unsecured LDAP to LDAPS” for your Active Directory (AD). Working for a software vendor whose products “do stuff with AD,” I hear the question multiple times a week: “Does your product XY…
25 Years of AD Breaches: Three Moves to Transform Incident Response
- Semperis
Active Directory is attackers’ favorite path to domain dominance. Learn how mapping your defenses to the NIST Cybersecurity Framework can improve cyber incident response and recovery.
SyncJacking: Hard Matching Vulnerability Enables Entra ID Account Takeover
- Tomer Nahum
Attackers with certain privileges can abuse Entra Connect hard matching synchronization to take over synchronized Entra ID accounts.
Best Cybersecurity Conferences for Identity Security Professionals in 2026
- Semperis
For anyone safeguarding hybrid identity systems, continuous learning and cyber community engagement are critical. Here are our top picks for conferences that deliver a laser-focus on identity security—and the technical knowledge you need to stay ahead of threats.
Ransomware Defense in 2026: What CISOs Need to Know
- Sean Deuby | Principal Technologist, Americas
The fastest way to turn a cyber incident into a business outage is through identity system compromise. Ransomware continues to exploit that fact—and the consequences are real. Here are practical, board-ready steps CISOs can take to boost resilience when those attacks happen.
Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation
- Andrea Pierini
When misconfigured Service Principal Names (SPNs) and default permissions align, attackers can exploit Kerberos reflection to gain SYSTEM-level access remotely. Even with Microsoft’s security update, Ghost SPNs can still haunt you. Learn why.
Unlocking Unmatched Identity Resilience: The Semperis-Cohesity Partnership
- Chris Salzgeber | Former Product Manager, Integrations
The Semperis-Cohesity partnership is the convergence of two industry leaders, each with singular expertise. With Cohesity Identity Resilience, organizations can be confident that their critical identity systems are secure and recoverable.
