NSA Top Ten Cybersecurity Misconfigurations: An Active Directory Perspective (Part 2)

Final part of the CISA/NSA top-ten misconfigurations series from an AD perspective: misconfigured ACLs on shares, poor credential hygiene, and unrestricted code execution, with IOEs and IOCs.

Part 1 of the CISA/NSA top ten misconfigurations series for AD: default configurations, improper privilege separation, and lack of internal monitoring, with remediation guidance.

Wiz, a founding participant in CISA's Secure by Design initiative, details its pledge progress—no-cost SAML 2.0 SSO, mandatory MFA for direct logins, no default passwords, and least-privilege service accounts.

Key takeaways from the NSA's ten cloud security mitigation strategies, spanning shared responsibility, identity and key management, network segmentation, data protection and CI/CD security.

NSA backs Microsoft's call to patch BlueKeep (CVE-2019-0708), the wormable RDP flaw; with 800,000+ systems unpatched and exploits circulating, Semperis urges verifying backups and recovery now.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.