Active Directory

Headlines · 2

1. 2d
   PHP2Shell chain roots PAN-OS firewalls and targets Active Directory

   Dream Security said an apparent Chinese AI-assisted campaign chained the PHP2Shell vulnerabilities with the Fragnesia Linux privilege-escalation flaw to root 24 exposed Palo Alto Networks firewalls and an internal management server. Attackers then pivoted through a compromised US government-affiliated firewall, enumerated Active Directory, extracted credentials, and attempted actions including password spraying, backdoor account creation, and theft of a Keycloak SAML signing key. Palo Alto Networks Unit 42 independently confirmed the incident and tooling, while Dream found Claude Code, aiscan configured with DeepSeek and Kimi, and FOFA API keys; it found no direct evidence that AI wrote the exploit or scripts and did not characterize the operation as an autonomous nation-state campaign.

   Hacker News 首页（100+ 分） · 🔥 11
2. 4d
   Dell expands PowerProtect with identity resilience and AI recovery

   Dell Technologies is extending PowerProtect with identity resilience for Active Directory, Microsoft Entra ID and Okta, alongside identity threat detection and automated response in its managed detection and recovery service. It is also embedding PowerProtect in Dell AI Factory and expanding snapshot orchestration to PowerScale with ObjectScale replication. Dell claimed one customer improved backup-to-recovery efficiency 17-fold after restructuring its recovery approach, but the report did not disclose the customer, methodology or baseline, and the sponsored segment provided no independent verification of the announced capabilities.

   SiliconANGLE AI · 🔥 0

Experience and discussion from the community

Share my Active Directory experienceAsk about Active Directory