BadSuccessor After Patch: Using dMSAs for Credential Theft and Lateral Movement in AD

Akamai researchers evaluated Microsoft’s patch for the BadSuccessor vulnerability (CVE-2025-53779) to determine its scope and limitations. While the update effectively blocks the original direct escalation path, the core mechanics of BadSuccessor remain exploitable under specific conditions. In this article, we examine how attackers can continue to leverage delegated Managed Service Accounts (dMSAs) for credential theft […]

The post BadSuccessor After Patch: Using dMSAs for Credential Theft and Lateral Movement in AD appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.