Invisible Threats: Insecure Service Accounts

Secure database configurations are important. However, many database administrators fail to lock down accounts that are used by trusted services.

IAM is the control plane attackers target: inventory privileged human and machine identities, map their reach, and close the gap—broad, durable permissions that outlive the job that granted them.

A Project Zero post explains how arbitrary file write bugs on Windows can be turned into local privilege escalation, walking through practical exploitation techniques for this bug class.

A Project Zero post in the Windows exploitation tricks series, showing how an arbitrary directory creation primitive can be escalated into arbitrary file read.

A bug in the Windows Secondary Logon service, fixed as MS16-032, leaks a fully accessible thread handle from a privileged process, enabling privilege escalation without memory corruption.

A Windows Terminal Server issue allowing dead processes to be resurrected, reported to Microsoft and fixed in MS15-111, demonstrated as an exploitable elevation of privilege.