Curated security research, vulnerabilities, advisories and tools for practitioners.

#domain-controller

Security coverage tagged domain-controller.

1.

CVE-2026-41089 — Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE

research | 2026-05-13 00:00 | CVE-2026-41089 | aretiq.ai | original ↗ | #rce | #denial-of-service | #stack-overflow

2.

The Admin you forgot about

blog | 2025-07-13 00:00 | abdulmhsblog.com | original ↗ | #active-directory | #lateral-movement | #mimikatz

3.

NTDS.DIT Extraction Explained

blog | 2025-04-06 19:46 | semperis.com | original ↗ | #active-directory | #defense | #detection

4.

LDAPNightmare Explained

vulnerability | 2025-01-13 21:04 | CVE-2024-49113 | semperis.com | original ↗ | #rce | #denial-of-service | #windows

5.

Zerologon Exploit Explained

vulnerability | 2024-11-15 21:54 | CVE-2020-1472 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #detection

6.

DCSync Attack Explained

blog | 2024-10-09 23:00 | semperis.com | original ↗ | #active-directory | #credential-theft | #detection

7.

Active Directory Hardening Best Practices

blog | 2024-02-07 11:01 | semperis.com | original ↗ | #active-directory | #bloodhound | #best-practices

8.

AD Security 101: Domain Controller Security

blog | 2023-05-05 14:03 | semperis.com | original ↗ | #access-control | #active-directory | #hardening