> TritonInfoSec News
Home / Jul 28, 2026 / Story
0
#5 BleepingComputer general July 27, 2026 at 21:00 UTC

New Certighost PoC exploit lets attackers hijack Windows domains

By Lawrence Abrams

AI Summary

A proof-of-concept exploit dubbed 'Certighost' has been publicly released for a Windows Active Directory Certificate Services vulnerability that allows authenticated attackers to potentially compromise an entire Windows domain. The PoC release significantly raises exploitation risk for organizations that have not yet patched their AD CS infrastructure.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 84.0/100

# More from July 28

  1. 1
    Coca-Cola confirms data theft in Fairlife ransomware attack BleepingComputer
  2. 2
    Ernst & Young data breach claimed by ShinyHunters extortion gang BleepingComputer
  3. 3
    Arista patches VeloCloud Orchestrator zero-day exploited in attacks BleepingComputer
  4. 4
    DentaQuest Data Breach Potentially Impacts Over 23 Million People SecurityWeek
  5. 6
    Hackers target US firms in FastJson RCE zero-day attacks BleepingComputer
  6. 7
    AI Agent Drives Espionage Attack on Thai Ministry of Finance Dark Reading
  7. 8
    PTC Windchill Vulnerability Exploited in Ransomware Campaign SecurityWeek
  8. 9
    Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw The Hacker News
  9. 10
    Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials SecurityWeek