Skip to main content
Background

Yuval Gordon

Posts by uval Gordon

The New Ouroboros Technique and How It Fits in dMSA’s Security Model

May 04, 2026Yuval Gordon

dMSA is more than a service account migration feature. Learn what its security model is trying to protect, how the implementation works, and where Ouroboros fits.

BadSuccessor Is Dead, Long Live BadSuccessor(?)

August 27, 2025Yuval Gordon

Read about Microsoft’s patch for BadSuccessor — a vulnerability in Windows Server Active Directory — and learn why its underlying mechanics still matter.

BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory

May 21, 2025Yuval Gordon

Akamai researchers found a privilege escalation vulnerability in Windows Server 2025 that allows attackers to compromise any user in Active Directory.