Windows Server 2025 quietly breaks a classic NTLM relay technique by enforcing changes inside msv1_0.dll. The update prevents attackers from abusing NTLMv1 and stripping MIC to relay authentication to LDAPS. core-jmp.org/2026/04/what-w…

@bytecodevm @Securityblog This is the exact text by @decoder_it ?

@sekurlsa_pw @Securityblog @decoder_it I don't know if this is the same author, but maybe yes.

@bytecodevm @sekurlsa_pw @Securityblog Yes I confirm 😅