Rich Peckham

Over the history of Active Directory, threat actors have continually identified new ways of exposing vulnerabilities in the Kerberos authentication protocol. To help reduce the risks associated with Kerberoasting, Microsoft is deprecating RC4 encryption beginning in April 2026. If you haven’t already located the applications in your environment that could be disrupted by this change, it’s time to put that task at the top of your to-do list.

Have you ever gone toe to toe with the threat actor known as Octo Tempest? This increasingly aggressive threat actor group has evolved their targeting, outcomes, and monetization over the past two years to become a dominant force in the world of cybercrime. But what exactly defines this entity, and why should we proceed with caution when encountering them?