Attackers are abusing poorly secured and managed implementations of Microsoft Active Directory. Active Directory, built into most Windows Server operating systems, has become the dominant approach to managing Windows domain networks. If the attacker can get a foothold inside AD, he can leverage it to access all the systems connected on the network, experts say. Security firm Rapid7: Windows vulnerabilities – including in Active Directory – that can be abused by attackers are widespread. Rapid7 says 40 percent of its engagements involved pen testers conducting external compromise tests to identify “weaknesses and exposures””]
Source: https://www.cuinfosecurity.com/hackers-abuse-active-directory-a-12825