Security news aggregator

Latest coverage for Active Directory

Active Directory manages identities, access, and authentication across Windows networks, making it a target for privilege abuse and lateral movement.

11 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Active Directory is a centralized system that manages user accounts, devices, and permissions within a network domain. It organizes resources hierarchically, enabling authentication and access control across an organization’s IT environment. This structure allows administrators to enforce policies and manage identities consistently.

From a security standpoint, Active Directory is a critical asset because attackers who gain control over it can access or manipulate many network resources. Key risks include credential theft through techniques like Kerberos ticket attacks, privilege escalation by exploiting misconfigured permissions, and persistence via compromised service accounts. Effective defense involves strict access controls, continuous monitoring for unusual account behavior, and regular audits of group memberships and delegated rights to limit exposure.

Volume over time

Weekly headline count for the current query.

Showing 11 most recent headlines Filtered view

Incident responders suggested sweeping improvements following Active Directory database heist Exclusive Cybercriminals broke into systems belonging to the UK's NHS Professionals body in May 2024, stealing its Active Directory database, but the healthcare organization never publicly disclosed it, The Register can reveal.…

The Register 12 Jun 2025, 10:29 p.m. Active Directory Compromise Critical Infrastructure Database Disclosure Exposure Healthcare Incident Theft United Kingdom

Get those patches applied – all the big dogs are abusing it Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not want to do that given the recently patched vulnerability that has security experts deeply concerned.…

The Register 30 Jul 2024, 11:16 p.m. Active Directory Microsoft Patch Ransomware Virtualisation VMware Vulnerability

Akamai says it reported the flaws to Microsoft. Redmond shrugged A series of attacks against Microsoft Active Directory domains could allow miscreants to spoof DNS records, compromise Active Directory and steal all the secrets it stores, according to Akamai security researchers.…

The Register 8 Dec 2023, 11:11 a.m. Abuse Active Directory Compromise DNS Flaw Microsoft Research Spoofing Theft

'BingBang' boo-boo affected other internal Microsoft apps, too A misconfiguration in Microsoft's Azure Active Directory (AAD) could have allowed miscreants to subvert Microsoft's Bing search engine – even changing search results. User information including Outlook emails, calendars and Teams messages was also vulnerable.…

The Register 31 Mar 2023, 12:30 p.m. Active Directory Azure Exposure Flaw Microsoft Misconfiguration Vulnerability

Blinking, beeping, and flashing lights, blinking and beeping and flashing... Microsoft is bringing Azure Active Directory Identity Protection alerts to Microsoft 365 Defender to seemingly help IT folks thwart criminals infiltrating corporate networks via compromised users.…

The Register 26 Oct 2022, 5:27 p.m. Active Directory Azure Compromise Microsoft