Disclosing security researcher
Appears in 1 story
Published the technique and submitted tooling support
A new Kerberos attack gives attackers a path from a single compromised account to full domain control, even when the target account has no service principal name (SPN) registered. Researchers at Sprocket Security published the technique on September 21, 2026, showing how constrained delegation can be abused in a case long considered impossible.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
