Tag
Dream researchers uncovered an AI-assisted Chinese attack campaign that chained a custom PHP2Shell RCE exploit with a kernel privilege-escalation flaw to root 25 servers—including US government-affiliated systems—then pivoted into Active Directory for credential extraction and persistent access.
A security research blogpost introduces a new Kerberos delegation abuse path that combines Reflective RBCD and U2U sacrificial user techniques, plus an Impacket extension, to obtain forwardable tickets for Constrained Delegation without Protocol Transition against SPN-less accounts.
This paper presents two machine learning frameworks for detecting LDAP reconnaissance attacks: an ML classifier using weak supervision to predict malicious queries and a statistical hypothesis-testing method for mining novel malicious signatures, achieving practical detection performance.
A home network investigation reveals a seven-year-old bug in Charter's authoritative DNS that causes the hostname aa.ns.charter.com to resolve to 0.0.0.0, leading to blocked queries in Pi-hole.