If you haven’t patched your DC’s yet, you should get on to it immediately!
Microsoft has recently released an out of band patch for Kerberos. It’s very serious since it gives any authenticated user the possibility to become a Domain Admin.
More to read:
Security Research and Defense Blog
KB 3011780