this post was submitted on 18 Jan 2026
5 points (100.0% liked)

blueteamsec

627 readers
40 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
5
Using NTLM Reflection to Own Active Directory (CVE-2025-33073) (www.depthsecurity.com)
submitted 4 weeks ago by digicat to c/blueteamsec
1 comments fedilink hide all child comments
top 1 comments
sorted by: hot top controversial new old
[–] Hirom@beehaw.org 1 points 4 weeks ago

Are there alternatives to AD that don't suffer from regular critical vulns?

I know of a handful of auth provider solutions that are OSS and with LDAP and OAuth2 support, but I have no idea of those are viable for an organisation that need to manage Win hosts, not just web services.