Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise
A privilege escalation flaw has been demonstrated in Windows Server
2025 that makes it possible for attackers to compromise any user in
Active Directory (AD). "The attack exploits the delegated Managed
Service Account (dMSA) feature that was introduced in Windows
Server 2025, works with the default configuration, and is trivial
to implement," Akamai security researcher Yuval Gordon said in a
Read more https://thehackernews.com/2025/05/critical-windows-server-2025-dmsa.html