A single flaw in the way Windows domain controllers verify network identities has given attackers a shortcut to total control ...