Security researcher, ESSGroup
Appears in 1 story
Published independent analysis of the disclosure
A new Kerberos attack gives attackers a path from a single compromised account to full domain control, even when the target account has no service principal name (SPN) registered. Researchers at Sprocket Security published the technique on September 21, 2026, showing how constrained delegation can be abused in a case long considered impossible.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
