Microsoft’s three-phase RC4 disablement for Kerberos closes a real attack surface and quietly breaks the most common Kerberoasting detection rule in the process. The signal you keyed on is about to disappear, and the attack isn’t going with it.
Encryption-type detancy deton Kerberos TGS requests still catches lazy roasting, but as RC4 gets disabled the durable signal moves to behavior. What to grep for, why the AES downgrade tell degrades, and how to kill service-account false positives before they bury the SOC.
CNSA 2.0 deadlines are no longer abstract. Here is what crypto inventory, hybrid deployment, and agility actually look like when an assessor walks the floor in 2026.
NIST has finalized the first wave of post-quantum standards and the federal mandates are no longer aspirational. Here is what ISSOs, architects, and crypto inventory owners need to have on paper in 2026.
Public key infrastructure (PKI) cryptography is a system that uses public key cryptography to secure data transmission and authentication. PKI is based on the use of digital certificates, which are electronic documents that bind a public key to an identity. How PKI Cryptography Works PKI cryptography works by using a pair of public and private …
