Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions
Briefly

from The Hacker News1 month ago
"A simple misconfiguration in on-premise applications can override the Group Policy, effectively negating the Group Policy designed to stop NTLMv1 authentications," Silverfort researcher Dor Segal said.
The Hacker Newshttps://thehackernews.com/2025/01/researchers-find-exploit-allowing.html
"The Group Policy mechanism is Microsoft's solution to disable NTLMv1 across the network," Segal explained. "The LMCompatibilityLevel registry key prevents the Domain Controllers from evaluating NTLMv1 messages and returns a wrong password error when authenticating with NTLMv1."
The Hacker Newshttps://thehackernews.com/2025/01/researchers-find-exploit-allowing.html
"In exploiting these flaws, the idea is to coerce a victim to authenticate to an arbitrary endpoint, or relay the authentication information against a susceptible target and perform malicious actions on behalf of the victim."
The Hacker Newshttps://thehackernews.com/2025/01/researchers-find-exploit-allowing.html
Read at The Hacker News
#cybersecurity #ntlmv1 #windows-security #microsoft-active-directory #threat-exploits
[
|
]