
Trimarc: Kerberos Bronze Bit Attack (CVE-2020-17049) Scenarios to Potentially Compromise Active Directory
On December 10, NetSPI Security Consultant Jake Karnes was featured in Trimarc:
Jake Karnes (@jakekarnes42) with NetSPI published 3 articles (that’s right 3!) describing a new attack against Microsoft’s Kerberos implementation in Active Directory. He posted an Overview article, describing how the attack works, an Attack article on practical exploitation, and if you need further background on Kerberos, a Theory article.
This article attempts to summarize the key details of the attack and provide some expanded information and potential attack scenarios, including how Active Directory could be compromised leveraging this attack method.
Read the full article here: https://www.hub.trimarcsecurity.com/post/leveraging-the-kerberos-bronze-bit-attack-cve-2020-17049-scenarios-to-compromise-active-directory
Explore More News

Healthcare Business Today: Beneath the surface of insider threats: Addressing the human side of cybersecurity
NetSPI CISO Joe Evangelisto shared insights on how healthcare organizations can tackle insider threats by focusing on human-centric cybersecurity strategies.

NetSPI Introduces Dark Web Monitoring to Shield Against the Internet’s Hidden Threats
NetSPI launches Dark Web Monitoring, enhancing its External Attack Surface Management solution with real-time threat detection, exposure intelligence, and proactive risk mitigation.

Forbes: Silverfort’s Launch Signals The Start Of Agentic AI Security Arms Race
Enterprises face new security challenges as autonomous AI agents integrate into workflows, prompting specialized solutions to combat risks today.