Certighost and the Privilege Hiding in Your Certificate Authority

BleepingComputer BleepingComputer —

CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller.

The patch is the easy part.

The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]

Read full article at BleepingComputer →