---
id: 9484
title: "Is Kerberoasting Still a Risk When AES-256 Kerberos Encryption Is Enabled?"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2025/10/21/is-kerberoasting-still-a-risk-when-aes-256-kerberos-encryption-is-enabled/"
published_at: "2025-10-21T16:00:00Z"
phying_url: "https://phying.com/item/9484"
lang: en
---

# Is Kerberoasting Still a Risk When AES-256 Kerberos Encryption Is Enabled?

## Summary

Don't rely on AES-256 encryption alone to mitigate Kerberoasting risk. Discover the fundamental flaw that lets attackers succeed and what you must fix: the service account password.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2025-10-21T16:00:00Z
- **Original:** https://specterops.io/blog/2025/10/21/is-kerberoasting-still-a-risk-when-aes-256-kerberos-encryption-is-enabled/
- **Phying News:** https://phying.com/item/9484