Why attackers love your ADCS server (and what to do about it)

Certificate Services misconfigurations are one of the fastest paths to domain admin in SMB environments. Here's what ESC1 and ESC8 mean for your org — and why your current AV won't catch it.