
Trimarc: Kerberos Bronze Bit Attack (CVE-2020-17049) Scenarios to Potentially Compromise Active Directory
On December 10, NetSPI Security Consultant Jake Karnes was featured in Trimarc:
Jake Karnes (@jakekarnes42) with NetSPI published 3 articles (that’s right 3!) describing a new attack against Microsoft’s Kerberos implementation in Active Directory. He posted an Overview article, describing how the attack works, an Attack article on practical exploitation, and if you need further background on Kerberos, a Theory article.
This article attempts to summarize the key details of the attack and provide some expanded information and potential attack scenarios, including how Active Directory could be compromised leveraging this attack method.
Read the full article here: https://www.hub.trimarcsecurity.com/post/leveraging-the-kerberos-bronze-bit-attack-cve-2020-17049-scenarios-to-compromise-active-directory
Explore more News

Proactive Security in Azure and Avoiding Common Mistakes!
NetSPI Director of Services, EMEA, Sam Kirkman was featured in Cloud Security Podcast at Black Hat Europe! Watch the full episode below.

The Wall Street Journal: Proactive Cybersecurity Is a Necessity, Not a Luxury
The Wall Street Journal included a Letter to the Editor from NetSPI CEO Aaron Shilts on the need for proactive security measures to combat today's threats.

Forbes: The Trust Stack For Enterprise AI: Building Trust And Easing Adoption
Forbes features NetSPI CEO Aaron Shilts sharing key insights on building trust and driving adoption in enterprise AI innovation.