Everything Malware Brief has reported about privilege escalation: 3 stories, newest first. Part of our Threat Intelligence coverage.
Overly permissive group policies and cached credentials allow attackers to traverse your network without ever stealing new data from the endpoints they initially compromise.
DCSync abuse requires only read permissions on the directory service replication interface, meaning standard password policies offer no defence against this specific extraction method.
A high-severity flaw in the miniOrange OTP Verification plugin allows attackers to escalate privileges on WordPress installations running versions up to 5.5.7.