Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

The Hacker News 24 July 2026, 17:15 EEST Security Domains

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.

Read the full story on The Hacker News https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html

An expired domain or a forgotten certificate takes a site down just as effectively as an attack. At CrockyHost hosting renewals and SSL are handled for you.

Keep reading

The Network Has Become the Control Plane for AI Security The Hacker News
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts The Hacker News
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation The Hacker News
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet The Hacker News