Windows administrators face a hard, irreversible deadline in three days: when July 14's cumulative update installs, Microsoft permanently removes the registry key that allowed domain controllers to ...

📌 Note: Legacy v1.0 files are archived in the archive/ folder for reference. For migration from standalone scripts to the module, see Migrating from v2.x. A PowerShell module for assessing DES and ...

Introduction Xloader is an information stealing malware family that evolved from Formbook and targets web browsers, email clients, and File Transfer Protocol (FTP) applications. Additionally, Xloader ...

Over the history of Active Directory, threat actors have continually identified new ways of exposing vulnerabilities in the Kerberos authentication protocol. To help reduce the risks associated with ...

Microsoft is finally ripping out one of the weakest links in its identity stack, cutting off a legacy cipher that attackers have abused for years to walk straight into corporate networks. The move ...

Update as of 2/4/2026: Details on the Windows Update rollout strategy added. As organizations face an evolving threat landscape, strengthening Windows authentication is more critical than ever. The ...

I'd like to thank my coauthors, Victor Vrabie, Adrian Schipor, and Martin Zugec, for their invaluable contributions to this research. TL;DR A Chinese APT group compromised a Philippine military ...

A fresh firestorm has erupted over Microsoft’s handling of cybersecurity risks, with U.S. Senator Ron Wyden (D-OR) calling on the Federal Trade Commission (FTC) to investigate the company for what he ...