Optiv's Source Zero team examines how resetting computer accounts can introduce backdoors and bypasses into an Active Directory environment.

We identified Ivy framework fileless attack techniques that execute undetected in Microsoft Office. Here's how with suggested security augmentations.

Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain.