New Microsoft Active Directory Vulnerability ​

A new Microsoft Active Directory Domain Services high-severity vulnerability allows attackers with limited privileges to obtain full system control. Attackers can create a fake UPN/ SPN and use similar looking Unicode characters. This can result in the authenticator being confused and can therefore gain higher privileges. Microsoft deems the exploitability as unlikely, and network administrators are currently working to patch the issue.