CISA and five international cybersecurity agencies published technical guidance documenting 17 techniques hackers use to compromise Microsoft Active Directory environments, exploiting identity configurations, legacy protocols, and certificate services to escalate privileges and establish persistence in enterprise networks.
Windows administrators are experiencing widespread Remote Desktop Services freezes following Microsoft's September 2026 Patch Tuesday updates for Server 2019, 2022, and 2025. The bug, triggered by session disconnects, causes RDP connections to hang and prevents new logins, with kernel-level analysis pointing to a deadlock in RDPSERVERBASE!WDLIB_Close. Organizations face a dilemma: rolling back restores stability but removes critical security patches including fixes for actively exploited zero-days.