AD FS DKM ACL Hardening Enforcement Starts October 13, 2026: What CVE-2026-56155 Follow-Up Means for You Auto-remediation for CVE-2026-56155 switches from opt-in to on-by-default this month. Check Event ID 1132 now, and decide the RemediateDkmAcl setting deliberately before the default flips. Oct 11, 2026 6 min read Active Directory
CVE-2026-56155: The AD FS Privilege Escalation Bug That Hands Over Your Token-Signing Keys An authenticated foothold on an AD FS server is all CVE-2026-56155 needs to reach full admin and your token-signing keys. How to check, patch, and lock down who can log on to AD FS. Oct 7, 2026 4 min read Active Directory
