Windows SMB Client Vulnerability Enables Attacker to Own Active Directory

A critical vulnerability in Windows SMB client authentication that enables attackers to compromise Active Directory environments through NTLM reflection exploitation. Classified as an improper access control vulnerability, this vulnerability allows authorized attackers to escalate privileges via carefully orchestrated authentication relay attacks over network connections. Seven months after the June 2025 security patch release, research reveals […]

The post Windows SMB Client Vulnerability Enables Attacker to Own Active Directory appeared first on Cyber Security News.