Microsoft April 2026 Patch Tuesday fixed 163 CVEs, marking its second-largest security update. Three zero-day vulnerabilities impacted SharePoint, Chromium-based Edge workflows and Microsoft Defender.

An unauthenticated crafted packet becomes code execution in AD DS. Microsoft's record carries CVSS 8.1 with high attack complexity and no observed exploitation.

CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier ...

Jesus Vigo covers how systems administrators leverage PowerShell cmdlets to manage Active Directory networks, including the devices and users it services. Microsoft’s PowerShell (PS) management ...

Adalanche provides immediate insights into the permissions of users and groups within an Active Directory. It’s an effective open-source tool for visualizing and investigating potential account, ...

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows ...