1 post
From a malicious VS Code extension to Domain Admin via a fresh 2025 AD privilege escalation — BadSuccessor (CVE-2025-29810) chained with VM memory forensics.