{"id":22366,"date":"2025-05-29T10:10:00","date_gmt":"2025-05-29T08:10:00","guid":{"rendered":"https:\/\/defenderbox.de\/?p=22366"},"modified":"2025-08-08T13:58:09","modified_gmt":"2025-08-08T11:58:09","slug":"windows-leak","status":"publish","type":"post","link":"https:\/\/defenderbox.de\/en\/windows-luecke\/","title":{"rendered":"Critical security vulnerability in Windows Server 2025"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

dMSA function opens the door to the Active Directory for attackers!<\/h2>\n

Researchers from the security company Akamai have discovered a serious security vulnerability in Windows Server 2025 that potentially affects every company that relies on Active Directory (AD). The risk: Attackers can use the new function for delegated Managed Service Accounts (dMSA) to gain increased authorizations in the network undetected - and thus compromise sensitive areas.<\/p>\n

Our recommendation at DEFENDERBOX:<\/h2>\n

We help to identify exploitable security gaps! How? Find out how secure your company is with a test installation! Now to the Familiarization price<\/a> test!<\/p>\n

What is behind the Windows security vulnerability?
<\/strong><\/h2>\n\n\n\n\n\n

Windows Server 2025 introduced the dMSA feature, which is intended to replace classic service accounts with managed, delegable accounts. The idea: more automation, less administration effort.<\/p>\n

But this is precisely where the danger lies. An attacker only needs minimal permissions in any organizational unit (OU) of the Active Directory - a constellation that is completely inconspicuous in most corporate networks. Even if the dMSA feature is not actively used, the attack surface remains as soon as a Windows Server 2025 Domain Controller is integrated.<\/p>\n

Who is affected?<\/h2>\n

According to Akamai, 91 % of the AD environments tested are potentially vulnerable. In many cases, normal users - without administrator rights - have sufficient authorizations to create dMSAs and thus gain access to privileged accounts. This is a dangerous gap that companies carry unnoticed in their systems.<\/p>\n

What can companies do now?<\/h2>\n

Until Microsoft provides an official security update, companies should take urgent action:<\/p>\n