#privilege-escalation

2 posts

AnalysisCVE-2026-50507Jun 30, 2026

Breaking BitLocker Again: How WinRE Became the Skeleton Key to Encrypted Windows

A 2026 wave of BitLocker bypasses all abuse the same weak spot, the Windows Recovery Environment. Here is how the trust boundary breaks, why the fixes keep failing, and what actually protects your data.

13 min read·#bitlocker#windows#winre

AnalysisJun 9, 2026

Kerberoasting: Turning One Domain Account into a Pile of Service Passwords

Any authenticated user in an Active Directory domain can ask for tickets that are effectively offline password hashes for service accounts. Here is how Kerberoasting works, why it is so reliable, and how to shut it down.

11 min read·#active-directory#kerberos#windows