LDAP Injection Attack Defense: AD Security 101

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

How the PetitPotam attack works: EFSRPC authentication coercion relayed via NTLM to AD CS Web Enrollment (ESC8) can yield Domain Admin; the post maps the full chain and covers detection plus mitigations like disabling NTLM or enabling EPA.

A detailed overview of L1TF, a CPU vulnerability affecting some Intel CPUs (Skylake and older), including how it can be exploited and possible mitigation strategies.

Attacking parameter names instead of values can find bugs that value fuzzing misses, since apps validate values but not names. The post demos SQL injection via arbitrary query string parameters.

Null bytes still bypass validation because native code ends strings at the first zero byte while managed code does not: Java's .jpg filename check falls to %00, while ASP.NET rejects embedded nulls.

Attacks need not arrive via HTTP: webmail processes SMTP data, monitoring UIs render sniffed packets, portals fetch RSS and URL imports — out-of-band channels are real attack surface, Stuttard warns.