Threat Intelligence
Mistakes That Leave You Open to DCSync Attacks
DCSync attacks often succeed because administrators grant excessive replication rights to service accounts that should only hold limited permissions.
privilege escalation
Everything Phish Herald has reported about privilege escalation: 2 stories, newest first. Part of our Threat Intelligence coverage.
Vulnerabilities
Unauthenticated attackers can seize vendor roles via Blocksy Companion flaw
A critical privilege escalation in the Blocksy Companion plugin allows unauthenticated users to bypass security checks and gain seller access on WordPress sites.