Yan Linkov
Vulnerabilities
HIGHCVE-2026-20929 - Detecting Kerberos Authentication Relay
A new vulnerability, CVE-2026-20929, allows attackers to exploit Kerberos authentication via DNS CNAME abuse. This poses significant risks to Active Directory environments. Organizations must patch systems and monitor for unusual authentication patterns to mitigate these threats.