SiliconAngle reports that threat actors could exploit Microsoft’s Dynamic Host Configuration Protocol DNS Dynamic Updates functionality to facilitate the spoofing of Active Directory DNS records without additional user authentication. Akamai researchers discovered that 40% of all its monitored networks, including those in major corporate data centers, leverage Microsoft DHCP services and are vulnerable to attacks, which could be conducted even outside LAN.

Source: SC Magazine