When Is WinRM Over HTTP Secure?

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Why LAN Manager authentication level 2 on domain controllers is risky — and how moving to level 3 blocks outbound NTLMv1 while keeping legacy compatibility, a fix you can apply today.

Why the common 'switch from LDAP to LDAPS' recommendation is mostly ineffective: AD members always use port 389, common workarounds fail, and the post explains what actually hardens AD LDAP.

Overpass the Hash converts a captured NTLM hash into fresh Kerberos tickets, giving attackers an authenticated session beyond Pass the Hash. Details the Mimikatz technique, detection, and defenses.

Argues the leaked Windows XP and Server 2003 source code is an underused red team resource, since Kerberos and NTLM implementations remain mostly unchanged and reveal what MS-* specifications omit.

Semperis introduces Migrator for Active Directory 2.0, an update aimed at helping organizations move Active Directory environments with confidence and greater operational control.