Active Directory Abusing Unconstrained Delegation: From Printer Bug to Domain Compromise How attackers abuse Kerberos Unconstrained Delegation to capture TGTs and pivot to Domain Admin, plus blue-team defenses. 2026.05.28 Active Directory