Root Causes: A PKI and Security Podcast

Root Causes 647: AD CS "Certighost" Flaw Highlights Agentic Identity Risks

Root Causes: A PKI and Security Podcast

Show Notes

A newly revealed flaw in Active Directory Certificate Services (AD CS) allows an attacker to improperly obtain cryptographic credentials for an agent. We discuss the implications that this flaw Certighost (pronounced sert-uh-GHOST) has for agentic AI at large.

More from Root Causes: A PKI and Security Podcast

Oct 21, 2026

Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part two of two, with guest Bruno Coulliard.

Oct 19, 2026

Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.

Oct 16, 2026

In this second of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

Oct 14, 2026

In this first of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

See all episodes →