BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Identity Crisis: Novel Vulnerabilities leading to Ke
 rberos\n   Downgrade\, DoS\, and Full Domain Takeover\n   Tags: DEF CON Of
 ficial Talk | Demo 💻 | Tool 🛠 | Exploit 🪲\n   When: Saturday\, Au
 g 8\, 10:00 - 10:59 PDT\n   Where: LVCCW Level 1 Hall 3 906 (Main Track 3)
  and DCTV-3 - [1]Map\n\n   Description:\n\n   Active Directory remains a m
 ajor component of modern enterprise\n   networks\, and its security is par
 amount. Active Directory attack\n   campaigns often aim to achieve Domain 
 Admin privileges\, which allow\n   complete control over the domain. But w
 hat if we could simply confuse\n   domain controllers\, causing them to id
 entify us as someone else? In\n   this talk\, we’ll dive into Kerberos a
 nd Active Directory and show\n   how curiosity and creative thinking led t
 o the discovery of two new\n   identity confusion vulnerabilities. The fir
 st vulnerability\,\n   KerberLoss (CVE-2026-25177)\, bypasses a forest-wid
 e security mechanism\n   to perform a Denial of Service\, or even force au
 thentication to\n   downgrade from Kerberos to NTLM. We later discovered R
 esetNightmare\n   (CVE-2026-27912): a logical flaw in a Kerberos mechanism
 \, allowing\n   low-privileged users to compromise any account in the doma
 in\,\n   including domain admins\, leading to full domain takeover. The\n 
   vulnerability is surprisingly easy to exploit and has a single\, common\
 n   prerequisite\, making it highly dangerous for unpatched environments.\
 n   We’ll explain the vulnerabilities\, show them in action\, and share\
 n   practical detection opportunities and mitigation strategies to reduce\
 n   exposure. In addition\, we’ll be releasing a tool that automatically
 \n   runs the entire attack flow for simple experimentation and testing.\n
 \n   SpeakerBio:  Shai Laron\, Semperis\n\n   Shai Laron is a Security Res
 earcher with 6 years of experience\,\n   focusing on Active Directory\, Wi
 ndows\, and Identity Security\, working\n   at Semperis' Research team. He
  has a strong passion for researching\n   Kerberos and has discovered mult
 iple vulnerabilities related to it.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n
 \n\n
DTEND:20260808T175900Z
DTSTART:20260808T170000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 906 (Main Track 3) and DCTV-3
SUMMARY:Identity Crisis: Novel Vulnerabilities leading to Kerberos Downgrad
 e\, DoS\, and Full Domain Takeover
END:VEVENT
END:VCALENDAR