A privilege escalation flaw has been demonstrated in Home windows Server 2025 that makes it attainable for attackers to compromise any consumer in Energetic Listing (AD).
“The assault exploits the delegated Managed Service Account (dMSA) characteristic that was launched in Home windows Server 2025, works with the default configuration, and is trivial to implement,” Akamai safety researcher Yuval Gordon mentioned in a
Crucial Home windows Server 2025 dMSA Vulnerability Permits Energetic Listing Compromise
