Recent security reports have indicated that vulnerabilities in Microsoft's NTLM authentication protocol are being actively exploited in the wild. Cybercriminals are reportedly intercepting NTLM hashes ...

A vulnerability in Windows that exposes NTLM hashes via .library-ms files is currently being actively exploited by hackers in phishing campaigns targeting government agencies and private companies.

A vulnerability allowing attackers to leak NTLM authentication hashes with minimal user interaction has been actively exploited just days after Microsoft released a patch. The flaw, tracked as ...

One attack vector for gaining access to the network is so-called NTLM relaying. Microsoft is now making this more difficult with new measures. A frequently observed attack vector that criminals use to ...

Microsoft has released fresh guidance to organizations on how to mitigate NTLM relay attacks by default, days after researchers reported finding a NTLM hash disclosure zero-day in all versions of ...

Update, Dec. 07, 2024: This story, originally published Dec. 06 now includes a statement from Microsoft about the new Windows zero-day vulnerability and further information about the 0patch ...

When you log in to a Windows 11/10 domain-joined machine and try to connect to the already mapped drive or multiple client workstations are unable to correctly ...

All versions of NTLM will no longer be developed further and are considered obsolete (deprecated). With this statement, Microsoft has now substantiated its announcement from last October and is ...

Microsoft has finally decided to add the venerable NTLM authentication protocol to the Deprecated Features list. The announcement means that admins dragging their feet to move to something more secure ...