News Certighost Isn’t the Real Story. Your Unreviewed AD Defaults Are. by Rebecca Sutton July 25, 2026 by Rebecca Sutton July 25, 2026 The Certighost AD CS privilege escalation bug will get patched. The Windows default that made it possible, an unreviewed machine account quota, will not fix itself. FacebookTwitterLinkedinEmail