PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Change How You Protect Active Directory Service Accounts

semperis.com | blog | #active-directory | #service-accounts | #dsp | #ad-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Change How You Protect Active Directory Service Accounts * Active Directory Security * Sep 29, 2026 * Read 4 MIN * Discovering AD service accounts is harder than it looks * Finding service...
Published
Collected

Related coverage

blog · semperis.com
DSP 5.3: Change How You Protect Active Directory Service Accounts
NetSPI released Directed Simulation Platform 5.3, adding new capabilities for simulating and validating protection of Active Directory service accounts. The release helps security teams test account hardening against real attack paths before attackers reach them.
vulnerability · netspi.com
Windows Privilege Escalation Part 2: Domain Admin Privileges
This post focuses on obtaining domain administrative privileges from a local administrator or domain user account. Once the initial steps have been taken to obtain local administrative access on a Windows operating system, the natural next steps are to gain domain user and domain administrative privileges.
blog · semperis.com
AD Group Risks: How Cryptographic Operators Dangers Escalate Quickly
At first glance, the Cryptographic Operators group doesn’t look scary. But it sits dangerously close to the systems that define trust—and in Windows, trust is everything. Here’s how to head off risk in your environment.
blog · semperis.com
Battling Zombie Certificates: The Persistent Risk Lurking in AD CS
Darkness falls across the land…and Zombie Certificates—authentication certificates that can’t be killed—are close at hand! Learn how to detect and kill these AD CS persistence risks…and prevent another outbreak…
blog · semperis.com
Introducing Migrator for AD: Move Active Directory with Confidence
# Introducing Migrator for AD: Move Active Directory with Confidence * Active Directory Security * Sep 09, 2026 * Read 5 MIN * Migration is not data movement. It is an identity security event. *...
blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
Back