Security researcher, Google Project Zero
Appears in 1 story
Developed the U2U sacrificial user technique
A new Kerberos attack gives attackers a path from a single compromised account to full domain control, even when the target account has no service principal name (SPN) registered. Researchers at Sprocket Security published the technique on September 21, 2026, showing how constrained delegation can be abused in a case long considered impossible.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
