CVE-2025-21299 and CVE-2025-29809: Unguarding Microsoft Credential Guard

How attackers abuse Active Directory unconstrained delegation: coercing a DC to authenticate to a compromised host captures its TGT, enabling DCSync, Golden Tickets and full domain takeover.

Practical exploitation of Bronze Bit (CVE-2020-17049): attackers with a service account hash can bypass Protected Users and TrustedToAuthForDelegation restrictions to abuse Kerberos delegation paths.

Overview of the Bronze Bit attack (CVE-2020-17049), which abuses Kerberos constrained delegation by flipping the forwardable flag on service tickets to impersonate users marked as sensitive.

Theory behind the Kerberos Bronze Bit attack (CVE-2020-17049), which abuses a KDC flaw to bypass delegation checks in resource-based constrained delegation attacks against Active Directory.

When self-registration is enabled, any unauthenticated attacker can create an account and immediately achieve host-level remote code execution on self-hosted Gitea instances.

Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.