Nathan McNulty on Mythryl: “Oh, I should probably have mentioned that the vulnerable DSA account…”

Oh, I should probably have mentioned that the vulnerable DSA account also has "Run as service" permissions on all your DC's.....

Nathan McNulty@nathanmcnulty.com

⚠️ If you are using SAM-R, especially with Defender for Identity, you may be vulnerable to a downgrade attack! ⚠️ This was so dangerous they are disabling SAM-R queries in the coming weeks. Only classic sensor is affected, not XDR agent sensor (3.x). learn.microsoft.com/...

12/5/25, 11:36 pm3 reposts6 likes

Post