Metasploit 2026 update: new kerberos & certificate tracing

{
  "signal_id": "961258c9-a8da-4c25-9f0a-722b5851c5c6",
  "signal_type": "news",
  "signal_subtype": "launches",
  "detected_at": "2026-06-13T01:09:47+00:00",
  "company": {
    "name": "Rapid7",
    "domain": "rapid7.com"
  },
  "data": {
    "url": "https://securityarsenal.com/blog/metasploit-2026-update-new-kerberos-and-certificate-tracing-detection-and-hardening",
    "title": "Metasploit 2026 update: new kerberos & certificate tracing - detection and hardening.",
    "ticker": "NASDAQ:RPD",
    "excerpt": "Metasploit 2026 update: new kerberos & certificate tracing - detection and hardening.\n\nSecurity Arsenal Team\n\nJune 12, 2026\n\nIn the June 2026 Metasploit Weekly Update, Rapid7 introduced significant quality-of-life improvements for operators: KerberosTicketTrace and CertificateTrace. While these options are designed to streamline debugging and module development, they represent a maturation of the offensive toolset available to adversaries. By providing granular visibility into Kerberos tickets and digital certificates handled by modules, Metasploit lowers the barrier to successfully exploiting complex Active Directory (AD) environments.\n\nFor defenders, this update signals a shift. Attackers can now more easily troubleshoot failures in Kerberoasting, Golden Ticket creation, or PKI abuse (ESC1/ESC8) attempts. This blog post breaks down the technical implications of these updates and provides actionable detection and remediation strategies to harden your environment against these evolving techniques.\n\nTechnical analysis.\n\nAffected Products and Platforms:\n\n* Metasploit Framework: All versions updating to the June 2026 release.\n* Target Environment: Primarily Windows Active Directory domains (Windows Server 2016+).\n\nNew Capabilities:\n\n* KerberosTicketTrace: This option enables verbose logging for Kerberos tickets. When a module (e.g., auxiliary/admin/kerberos/get_ticket) interacts...",
    "product": "CertificateTrace",
    "summary": "Rapid7, Inc. launched CertificateTrace on Jun 12th '26.",
    "planning": false,
    "image_url": "https://securityarsenal.com/og-image-v6.jpg",
    "confidence": 0.6902,
    "product_data": {
      "full_text": "CertificateTrace",
      "fuzzy_match": true
    },
    "published_at": "2026-06-13T01:09:47Z",
    "effective_date": "2026-06-12",
    "article_sentence": "In the June 2026 Metasploit Weekly Update, Rapid7 introduced significant quality-of-life improvements for operators: KerberosTicketTrace and CertificateTrace."
  }
}

curl https://signals.autobound.ai/v1/signals/961258c9-a8da-4c25-9f0a-722b5851c5c6 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"rapid7.com","limit":20}'