---
id: 5728
title: "Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/"
published_at: "2026-08-05T22:35:00Z"
tags: ["active-directory", "denial-of-service", "privilege-escalation", "identity-security", "kerberos", "unicode", "cve-2026-25177", "cve-2026-27912"]
phying_url: "https://phying.com/item/5728"
lang: en
---

# Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover

## Summary

Semperis details Active Directory flaws abusing invisible Unicode characters: KerberLoss (CVE-2026-25177) causes Kerberos downgrade and DoS, ResetNightmare (CVE-2026-27912) enables domain takeover.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2026-08-05T22:35:00Z
- **Original:** https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/
- **Phying News:** https://phying.com/item/5728