All the passwords were stored in Active Directory description fields

An organization exposed all user passwords by storing them in plain text within Active Directory description fields, making it trivial for attackers to harvest credentials. The security lapse allowed a hacker to easily retrieve the sensitive information, highlighting a fundamental failure in basic password management practices.

SPONSORED LINKS MOST POPULAR EVENTS - Overcoming the trade-offs in data sovereignty What does data sovereignty actually mean for your network, which trade-offs are unavoidable? Learn more. - From Prompt to Exploit: How LLMs Are Changing API Attacks Modern applications are API-driven, interconnected, and often over-permissioned, making them an ideal target for AI-assisted attacks. - Architecting the Future: Unlocking Enterprise Data Services for Kubernetes Join us to discover how to eliminate infrastructure silos and establish a standardized, enterprise-grade cloud-native platform. - Catch the Advanced Attacks Microsoft 365 Misses with Behavioral AI Security Microsoft 365 is the backbone of enterprise communication, and its native security filters out the known and the noisy. - Virtual Cyber Recovery Sim Step into the chaos of a live ransomware breach, test your response skills, and team up with other IT and security pros to outsmart cybercriminals - Virtual Cyber Recovery Simulation Ransomware attacks aren’t slowing down, and neither are we. Druva’s hit event, Escape Ransomware, is now fully virtual. - Agentic AI at Scale: From Pilot to Production Join us to learn how to unlock real ROI by driving adoption of AI at scale. AI https://beta.theregister.com/tag/ai - SECURITY All the passwords were stored in Active Directory description fields It was far too easy for a hacker to get the information - security Commvault says it's time to rethink resiliency as AI crooks leave victims in a 'dark, dead' state Those backup plans need backup testing - networks Bend the beam like Beckham to defeat anti-jamming tech It's hard to stop a signal jammer if you can't locate the source, say Rice University researchers - OS PLATFORMS Grep this: Microsoft grafts most Linux commands onto Windows Coreutils serves over 75 Unix commands in Windows and PowerShell command lines - personal tech Ring gets buzzed by class action for collecting visitors' faces without consent The latest in a series of raised eyebrows over Familiar Faces and other AI ventures Infosec https://beta.theregister.com/security - SECURITY All the passwords were stored in Active Directory description fields It was far too easy for a hacker to get the information - security Commvault says it's time to rethink resiliency as AI crooks leave victims in a 'dark, dead' state Those backup plans need backup testing - networks Bend the beam like Beckham to defeat anti-jamming tech It's hard to stop a signal jammer if you can't locate the source, say Rice University researchers - OS PLATFORMS Grep this: Microsoft grafts most Linux commands onto Windows Coreutils serves over 75 Unix commands in Windows and PowerShell command lines - personal tech Ring gets buzzed by class action for collecting visitors' faces without consent The latest in a series of raised eyebrows over Familiar Faces and other AI ventures FOSS https://beta.theregister.com/tag/FOSS - All the passwords were stored in Active Directory description fields It was far too easy for a hacker to get the information - Commvault says it's time to rethink resiliency as AI crooks leave victims in a 'dark, dead' state Those backup plans need backup testing - Bend the beam like Beckham to defeat anti-jamming tech It's hard to stop a signal jammer if you can't locate the source, say Rice University researchers - Grep this: Microsoft grafts most Linux commands onto Windows Coreutils serves over 75 Unix commands in Windows and PowerShell command lines - Ring gets buzzed by class action for collecting visitors' faces without consent The latest in a series of raised eyebrows over Familiar Faces and other AI ventures - No longer just a Copilot, Microsoft's AI wants to take the wheel Always-on agent promises to keep work moving, provided you trust it with practically everything