AD CS Vulnerabilities (ESC1–ESC8): How to Secure Your Microsoft PKI

AD CS Vulnerabilities (ESC1–ESC8): How to Secure Your Microsoft PKI Active Directory Certificate Services (AD CS) is often the forgotten link in Active Directory security. Deployed years ago and rarely audited, a Microsoft PKI can still issue certificates that open the doors to the entire domain. In June 2021, researchers Will Schroeder and Lee Christensen