Active Directory Security
Categories
- Active Directory Backup & Recovery (69)
- Active Directory Security (244)
- AD Security 101 (18)
- Agentic AI (13)
- Community Tools (26)
- Crisis Management (5)
- Directory Modernization (10)
- From the Front Lines (71)
- Hybrid Identity Protection (99)
- Identity Attack Catalog (32)
- Identity Security Research Library (10)
- Identity Threat Detection & Response (174)
- Our Mission: Be a Force for Good (15)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (19)
- Threat Research (91)
- Uncategorized (3)
The Minimum Viable Company Part 3: Enabling Visibility, Control, and Operational Resilience
- Kriss Stephen | Principal Solutions Architect
- Jul 21, 2026
True cyber resilience doesn’t begin with recovery. It starts much earlier, through stronger visibility, tighter control, and—crucially—identity resilience that enables the organization to correct issues before they became business-disrupting events.
Windows Privilege Abuse: How Attackers Escalate from Accounts with Dangerous Rights to Active Directory Compromise
- Andrea Pierini
- Jul 06, 2026
Discover the most attractive Windows privileges from an attacker’s perspective: those that permit a direct privilege escalation.
When the Lights Go Out: What the Foxconn Breach Tells Us About Identity-First Ransomware
- Benjamin Lim
- Jun 19, 2026
Understanding how an identity-first exploit enabled ransomware attackers to disable Foxconn can open your eyes to possible gaps in your own identity security. Discover how attackers take advantage of complexity in manufacturing organizations—and steps you can take to defend your organization’s business operations.
11 Real-World Risks Hidden in Active Directory Migrations
- Mike Masciulli
- Jun 12, 2026
An Active Directory migration and consolidation project is not just a data move. If you carry over legacy delegation mistakes, group nesting, trust relationships, and overprivileged accounts, you simply recreate risky attack paths. Learn how a security-first approach helps you make your new AD environment more secure.
RC4 and AD Migration: Uncover the Break Scenarios Hiding in Your Source Domain
- Mike Masciulli
- May 29, 2026
A quiet AD migration can turn into a noisy outage when RC4-dependent accounts fail. Migration services expert Mike Masciulli helps you understand where RC4-related failures hide—and how to find and fix them before cutover.
How to Audit Your Environment for RC4 Encryption
- Guido Grillenmeier and Rich Peckham
- Mar 30, 2026
Microsoft is deprecating RC4 encryption beginning in April 2026. This post explains the process—and points you to resources that can help.
What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)
- Andrea Pierini
- Mar 23, 2026
Learn about the discovery of CVE-2026-26119: why it worked and why you shouldn't underestimate authentication reflection.
When Is WinRM Over HTTP Secure?
- Andrea Pierini
- Mar 17, 2026
Is use of the Windows Remote Management (WinRM) protocol over HTTP inherently bad? Take a nuanced look at why "HTTP = insecure" isn't the whole story—and when HTTPS can actually introduce risk.
