Tag: CVE-2025-24054

2 Attack Reports | 1 Vulnerabilities

Attack reports

How NTLM is being abused in 2025 cyberattacks

NTLM, a legacy authentication protocol, remains prevalent in Windows environments despite known vulnerabilities. Threat actors continue to exploit both old and newly discovered flaws in NTLM for credential theft, privilege escalation, and lateral movement. Recent vulnerabilities like CVE-2024-43451…

credential theft

lateral movement

vulnerabilities

Published: November 26, 2025

Linked vulnerabilities : CVE-2024-43451 (CVSS 6.5), CVE-2025-24054 (CVSS 6.5), CVE-2025-24071 (CVSS 7.5), CVE-2023-38831, CVE-2025-33073 (CVSS 8.8)

Downloadable IOCs: 3

CVE-2025-24054, NTLM Exploit in the Wild

A critical vulnerability, CVE-2025-24054, related to NTLM hash disclosure via spoofing, has been actively exploited since March 19, 2025. The flaw allows attackers to leak NTLM hashes or user passwords using a maliciously crafted .library-ms file, potentially compromising systems. A campaign target…

Published: April 16, 2025

Downloadable IOCs: 1

Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24054

Ntlm

Published: March 11, 2025

Click here to see more Vulnerabilities