> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#2 The Hacker News general July 24, 2026 at 14:15 UTC

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

By [email protected] (The Hacker News)

AI Summary

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 for 'Certighost,' a flaw allowing low-privileged Active Directory users to obtain a Domain Controller certificate and authenticate as that machine account. The resulting Kerberos credential can then perform a DCSync attack to retrieve the krbtgt secret, enabling full domain compromise. This Active Directory privilege escalation path represents a critical risk for enterprise environments running misconfigured AD Certificate Services.

Read full article → https://thehackernews.com/2026/07/certighost-explo…

Relevance score: 87.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  3. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  4. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  5. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  6. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  7. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  8. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer
  9. 10
    ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link The Hacker News