A high-severity vulnerability, CVE-2021-23008, allows the bypass of Active Directory authentication if the attacker can hijack a Kerberos Key Distribution Center connection. The attacker uses a spoofed Kerberos Authentication Service Response, or authentication bypass is possible from a compromised AD server.  In order for the protocol to work, the user

Hijacking is extremely rare, but it does happen. It is well to consider how you should react if you end up being in the wrong place at the wrong time. The physical takeover of the aircraft by the hijackers may be accompanied by noise, commotion, and possibly shooting and yelling,