Researchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a ...

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released ...

The Certighost vulnerability exploits a little-known AD CS fallback mechanism to trick certificate authorities into issuing ...

Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS ...

OpenVPN offers three modes of deployment with varied pricing based on the same underlying protocol. Here are the pros, cons, and costs associated with each.

WatchGuard Technologies released patches on July 2 for a critical pre-authentication remote code execution vulnerability in every supported Firebox firewall model — the third critical flaw discovered ...

LDAP (Lightweight Directory Access Protocol) is a protocol designed to manage and access distributed directory information services over an Internet Protocol network. LDAP is used to store and ...

Cybersecurity firm ReliaQuest confirmed on May 19, 2026, that organizations running SonicWall Gen6 SSL-VPN appliances that applied the firmware patch for CVE-2024-12802 may still be fully exposed to ...

Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. During the intrusions, the ...

Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability in question is CVE-2020-12812 ...