It’s just Kerberos delegation… Trust me… | Darryl Baker | WWHF Deadwood 2022

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

Recently, many Active Directory vulnerabilities have been discovered that span every type of Kerberos delegation. Attacks such as Bronze Bit and PrintNightmare rely on common misconfigurations of these delegations. An emerging attack vector is compromising delegations that cross security boundaries (e.g. AD Trusts or in a hybrid AD environment). Microsoft has recently made the announcement of native Kerberos authentication in …

active directory announcement attack attacks attack vector authentication azure azure ad benefits darryl baker directory emerging environment hybrid kerberos microsoft misconfigurations printnightmare security span trust vulnerabilities wwhf