Active Directory Certificate Services — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Certighost Vulnerability Enables Domain Controller Impersonation via AD CS

  The Certighost vulnerability, tracked as CVE-2026-54121, allows low-privileged users to impersonate a Domain Controller by exploiting a flaw in Active Directory Certificate Services (AD CS). Attackers can manipulate the…

  2 articles · Updated July 24, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1059 articles · Updated February 9, 2026
• Microsoft to Disable NTLM by Default in Future Windows Releases

  Microsoft announced plans to disable the NTLM authentication protocol by default in future Windows releases due to its security vulnerabilities that have been exploited in cyberattacks. NTLM, introduced in 1993, has…

  10 articles · Updated January 30, 2026

Recent Intelligence Reports

• Certighost vulnerability allows domain controller impersonation via AD CS — Feeds.4Sysops · July 24, 2026
• Amazon security boss says crims abused max — Theregister · March 18, 2026
• Microsoft to disable NTLM by default in future Windows releases — Bleepingcomputer · January 30, 2026

Related Entities