CERTIGHOST POC EXPLOIT TARGETS WINDOWS DOMAINS

Certighost affects Windows Active Directory Certificate Services (AD CS), a critical component used by most enterprise networks for authentication and encryption. The vulnerability allows attackers with valid domain credentials to escalate privileges and take control of certificate issuance processes. The PoC exploit's release increases the risk for organizations that have not patched their systems. Windows domains rely on AD CS to verify user and device identities, making compromise particularly severe—attackers gaining control could impersonate any user or device on the network. Microsoft has released patches addressing Certighost as part of recent security updates. Security teams should prioritize patching AD CS servers and reviewing certificate issuance logs for suspicious activity. Organizations should also audit user access to certificate services and enforce additional authentication controls. The vulnerability underscores the importance of timely patching for directory services infrastructure, as compromise can provide attackers with persistent domain-wide access.