CYBERSECURITYTRACKER
Permanent story citation

Why Active Directory weaknesses stay open for years in teams with one or two admins

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10472

As cited

Copy frozen at (site build).

identity access

Why Active Directory weaknesses stay open for years in teams with one or two admins

David Fuhr, CTO at intcube, describes a 12-week security cohort for 27 municipalities focused on hardening Windows Server and Active Directory through weekly sessions, homework, and pre- and post-engagement measurements. The cohort addressed risky settings such as SMB signing, LDAP signing, and Kerberos hardening by testing changes in a lab environment before deployment.

Why it matters: System administrators in small and under-resourced teams need practical guidance on Active Directory hardening, as organizational barriers and technical risks around breaking changes often leave weaknesses unpatched for extended periods.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary