Kerberos Relay Attack Exploits DNS CNAME Responses

A new vulnerability in Windows Kerberos authentication allows attackers to exploit DNS CNAME responses to bypass existing defenses in Active Directory environments. This flaw significantly increases the attack surface for credential relay attacks, enabling systems to request tickets for services controlled by attackers. Organizations using Windows Kerberos are at risk of credential theft and unauthorized access.