Microsoft’s NTLM Hash Spoofing: From “Not Severe Enough” to CVE Fame in Just 7 Years!
Microsoft NTLM Hash Disclosure Spoofing, reported in 2018, was initially dismissed. Fast forward seven years, and voilà—it’s finally recognized as a security flaw, now with its own CVE-2025-24054. A classic tale of “better late than never,” proving that sometimes even tech giants need a nudge (or a seven-year nap).
Hot Take:
Well, it seems Microsoft took a leisurely seven-year stroll down memory lane before finally acknowledging the NTLM Hash Disclosure Spoofing vulnerability. Who knew procrastination could last almost a decade? John Page, aka hyp3rlinx, must feel like a digital Nostradamus, warning us about vulnerabilities that finally got their moment in the spotlight—years after the fact. Better late than never, right?
Key Points:
- NTLM Hash Disclosure Spoofing vulnerability reported in 2018.
- Initially dismissed by Microsoft as “not severe enough.”
- Vulnerability resurfaced in 2025 with CVE-2025-24054 designation.
- Hyp3rlinx, the original reporter, retroactively credited.
- Vulnerability allows remote network access.
Already a member? Log in here