『ドメイン参加してないPCからのアクセスはNTLMでいいでしょ』長く思い込んでた話題を、実環境で監査ログを見ながら検証してみました。
https://www.youtube.com/watch?v=NbVy-F11t2M
#Windows #ActiveDirectory

Kritische Schwachstellen zur Ausweitung von Active-Directory-Rechten

„ResetNightmare“ und „KerberLoss“ nutzen Schwächen von Identitätssystemen.

#ActiveDirectory #Authentifizierung #Cybersecurity #Cybersicherheit #Identität #Schwachstelle @Semperis #Sicherheitslücke

netzpalaver.de/2026/08/26/k...

When a site opens, a product is renamed, or teams reorganize, does your custom wordlist change too?

Environment-specific vocabulary has a lifecycle. Maintain it alongside the directory. What change source would you use? #ActiveDirectory #PasswordPolicy

NTLM vs Kerberos vs LDAP: cuál elegir para tu e-commerce

NTLM vs Kerberos vs LDAP: ¿cuál protege mejor los datos de tu e-commerce? Comparamos cifrado, tickets y vulnerabilidades reales antes de elegir

#ntlm #kerberos #ldap #activedirectory #autenticación

We published automatic database updates in safepass.me v9.0.1 and pwncheck.me 2.0.2, replacing the older manual update-script workflow. Review the release notes before scheduling an upgrade, then share your update checklist. #ActiveDirectory #WindowsServer

Discover how the PAYLOAD extortion group exploited Active Directory GPOs without ransomware. Learn how they weaponized standard Windows infrastructure.

#PAYLOADRansomware #ActiveDirectory #GroupPolicy #CyberSecurity #InfoSec

A local password audit only becomes useful when each pwncheck.me finding has an owner, a response, and a follow-up date. #ActiveDirectory #OfflineAuditing

How does your team track remediation?

Attackers are stealing NTDS.dit to dump AD hashes and forge Golden Tickets. #ActiveDirectory #Cybersecurity #GoldenTicket #IdentityTheft #Infosec #ADSecurity https://thedailytechfeed.com/attackers-steal-ntds-dit-to-craft-golden-tickets-via-ad-password-dumping/

New PAYLOAD ransomware uses a novel technique, hijacking Active Directory GPOs for domain-wide disruption without file encryption. Attackers combine data theft with visual extortion. #Ransomware #ActiveDirectory #GPO #CyberSecurity

🌐 cyber[.]netsecops[.]io

PAYLOAD ransomware hijacks AD GPOs to crash domains—no encryption, just disruption and data theft. #Ransomware #ActiveDirectory #Payload #CyberSecurity #ADSecurity #ThreatIntel thedailytechfeed.com/payload-rans...

~Kaspersky~
Attackers used domain-root GPOs to disrupt endpoints and extort without encryption or malware binaries.
-
IOCs: 37[.]19[.]210[.]12, 146[.]70[.]117[.]239, 149[.]102[.]229[.]154
-
#ActiveDirectory #Ransomware #ThreatIntel

PAYLOAD ransomware hijacked Active Directory GPOs to push ransom notes, wallpaper changes, logon banners, firewall cuts, and data theft across a Middle East manufacturing firm, without a Windows encryptor. #ActiveDirectory #SYSVOL #MiddleEast

If staff use it to name a site, tool, team, or project, it belongs in the custom wordlist discussion. Which local term would you add first? #ActiveDirectory #PasswordPolicy

📢 adnullenum : outil d'énumération Active Directory en session nulle (anonyme) via SAMR/LSARPC

Publié le 17/09/2026 sur GitHub (https://github.com/crypt0p3g/adnullenum), adnullenum est un outil open-source de reconnaissance…

🟡 vérification factuelle moyenne
#ActiveDirectory #SAMR #Cyberveille

📰 Microsoft Bagikan Solusi Sementara untuk Masalah Login Domain Windows 11

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/20/microsoft-workaround-masalah-login-domain-windows-11/

#activeDirectory #enterprise #update #vulnerability #windowsServer

#itsa2026 #Cohesity #Semperis #IdentityResilience #CyberResilience #ActiveDirectory #CyberSecurity

Microsoft released temporary guidance for enterprise admins facing Windows 11 domain authentication errors.

https://pcmasterinsider.com/windows-11-domain-login-fix-september-2026/

#Windows11 #ActiveDirectory #ITAdmin #TechNews

When planning domain controller maintenance, include the #password filter: verify the signed MSI, review deployment guidance, record the change, and confirm safepass.me is operating as expected. Add these checks to your next maintenance window. #ActiveDirectory #WindowsServer