RC4 in Active Directory: The silent risk that’s harder to find than you think

RC4 is a legacy encryption algorithm that Kerberos has relied on for decades to secure authentication traffic in Active Directory (AD) environments. That’s about to change—whether your environment is ready or not.  As part of the security hardening tied to CVE-2026-20833, Microsoft is phasing out RC4 encryption in Kerberos authentication. The April 2026 Windows update marks the first phase where Kerberos Key […]

5 changes CISOs and IAM leaders are calibrating after Mythos

In short: Runtime. Runtime. Runtime. Why runtime is king in the era of machine-speed attacks.