Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and compromise an AD environment.
'Certighost' Flaw Haunts Microsoft Active Directory Certificates
Summary + source link. No paywalls, no tracking.