Windows NTLM Hash Leak Flaw Exploited in Phishing Attacks on Governments
Security
A Windows vulnerability that allows the exposure of NTLM hashes via .library-ms files is being actively exploited by hackers in phishing campaigns targeting government entities and private companies. This flaw enables attackers to retrieve NTLM hashes, which can then be used for pass-the-hash attacks. The article does not mention specific technical details or the real impacts.