Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

HackRead reports that Microsoft patched the Certighost vulnerability in its July 2026 security updates. The flaw allowed a low-privilege domain user to obtain a valid Domain Controller certificate through Active Directory Certificate Services (AD CS), enabling domain controller impersonation and potentially domain-wide compromise. The feed also includes reports of hotel Wi-Fi gateway compromises targeting Microsoft 365 credentials and tokens, a Zimbra zero-day used by Russian hackers to steal email and credentials, Dolphin X malware profiling Windows victims, and data-exposure issues involving