Publications

CyberAct cybersecurity publications

SOC, Red Team, compliance, training: our practical insights and advice, published regularly.

#domain controller security #Active Directory attack #Kerberoasting #DCSync #Golden Ticket #domain controller #Active Directory #LLMNR #SMB signing #Pass-the-Hash #Pass-the-Ticket #compromised Active Directory #Credential Guard #Mimikatz Rubeus lateral movement #Exchange Hybrid #Entra ID #Lateral Movement #Cloud Identity #Trojans #Malware #SOC #Threat Intelligence #C2 #Security Audit #Privileged Accounts #Kerberos #AD Governance #IDOR #Microservices #Blue Team #API Security #CI/CD #IPv6 #NTLM #Red Team #Network Protocols #NTLM Relay #AD Hardening #SMB #LDAP #GPO #Pentest #Network Segmentation #Remediation #Fortinet #Vulnerability Management #Vendor Risk #Firewall #Credential Management #Network Vulnerability #GPU Cracking #Patch Management #Privilege Escalation #BloodHound #Azure AD #IAM Audit #AWS IAM #Cloud Security #AWS Pentest #OAuth #Microsoft 365 #Identity #ADFS #SAML #Hybrid Identity #Tier 0 #Zero Trust #Conditional Access #Identity Attack #DPAPI #Hybrid SOC #Exchange Online #Incident Response #Exfiltration #Audit Log

Red TeamPrivilege Escalation in Entra ID: How Limited Roles Can Lead to Global Admin

Application Administrator, Helpdesk Administrator… these roles look harmless. Here's how they can be chained to reach Global Administrator.

Jun 23, 20266 min read

#Entra ID #Privilege Escalation #BloodHound

MenacesFortiBleed: Why Patching Alone Won't Protect Your Fortinet Credentials

Over 86,000 Fortinet devices compromised through mass GPU cracking. Patching doesn't protect credentials already exfiltrated.

Jun 22, 20265 min read

#Fortinet #Credential Management #Network Vulnerability

MenacesFortinet 2026: Four Separate Flaws, One Systemic Risk

Four Fortinet products compromised in 2026 by four separate actors. Not a coincidence — a signal about vendor concentration risk.

Jun 22, 20266 min read

#Fortinet #Vulnerability Management #Vendor Risk

Red TeamInternal Pentest: How 4 Minor Misconfigs Can Own Your Entire Network

An internal pentest shows how mundane misconfigurations chain together to achieve full network compromise in under 48 hours.

Jun 22, 20266 min read

#Pentest #Active Directory #NTLM

Red TeamNTLM Relay: SMB, LDAP Signing and Full AD Compromise

Without SMB and LDAP signing, an attacker can chain an NTLM relay attack all the way to full Active Directory takeover.

Jun 22, 20266 min read

#Active Directory #NTLM #SMB

Red TeamLDAP Relay Attack: From LLMNR Spoofing to Domain Admin Shell

How a single unresolved DNS query can hand over domain admin rights — and why two LDAP settings are all it takes to shut that path down.

Jun 22, 20266 min read

#Active Directory #NTLM Relay #Red Team