Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit called LegacyHive, targeting a Windows User Profile Service (ProfSvc) arbitrary…
Active Directory Federation Services is a Microsoft product for single sign-on and identity federation. CVE-2026-56155 is an actively exploited privilege escalation vulnerability…
Microsoft shipped its largest Patch Tuesday on record, addressing 622 CVEs, more than triple the previous high. Two zero-days are under active…
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s…