Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise,
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).
« The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement, » Akamai security researcher Yuval Gordon said in a
« The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement, » Akamai security researcher Yuval Gordon said in a
,
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).
« The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement, » Akamai security researcher Yuval Gordon said in a
« The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement, » Akamai security researcher Yuval Gordon said in a
, ,
https://thehackernews.com/2025/05/critical-windows-server-2025-dmsa.html