What Is Kerberoasting? The Attack That Exploits Active Directory Service Accounts
Kerberoasting lets any domain user extract service account hashes from Windows and crack them offline — no admin rights …
Active Directory 5 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Pass-the-Hash: how the NTLM attack works without the password
Pass-the-Hash uses a stolen NTLM hash to authenticate on the network without needing the real password. Learn the …
LLMNR Poisoning: How Windows Hands Out Password Hashes on the Network
Windows broadcasts names on the network when DNS fails. The attacker replies, captures the NTLMv2 hash, and cracks it …
Mega Patch Tuesday: Microsoft fixes 3 zero-days
With 622 security fixes, the July 2026 Patch Tuesday is historic. Here are the 3 zero-days that demand an immediate …
DragonForce ransomware: the cartel that took down M&S and Co-op
DragonForce took down Marks & Spencer with a phone call to the helpdesk: it stole NTDS.dit and locked ESXi. A cartel …