⚠️ #CVE202524054 | #Ciberseguridad | #NTLM ⚠️
Una nueva vulnerabilidad en Windows permite el robo de credenciales NTLM con solo descargar un archivo .library-ms. Ya está siendo explotada activamente en campañas de phishing.

Eight days from patch to exploitation for Microsoft flaw : It's now hitting govt, enterprise targets

#Microsoft rated this bug as low exploitability. Miscreants weaponized it in just 8 days
www.theregister.com/2025/04/21/m...

#Windows flaw #CVE202524054 rated as "less likely" to be exploited. Attackers begged to differ.
#CyberSecurity #InfoSec #Vulnerability #Malware

CVE-2025-24054_PoC/PoC.py at main · xigney/CVE-2025-24054_PoC PoC - CVE-2025-24071 / CVE-2025-24054, NTMLv2 hash'leri alınabilen bir vulnerability - xigney/CVE-2025-24054_PoC

Ok, enough of this mooshy philosophical shit, let's talk tech.

Check out the mind blowingly simple 24054 PoC that is being used in active exploitation.

github.com/xigney/CVE-2025-24054_Po...

#cve202524054 #ntlmhash

NTLM Hash Exploit Targets Poland and Romania Days After Patch An NTLM hash disclosure spoofing vulnerability that leaks hashes with minimal user interaction has been observed being exploited in the wild

NTLMハッシュエクスプロイト、パッチ適用から数日後にポーランドとルーマニアを標的に

NTLM Hash Exploit Targets Poland and Romania Days After Patch #InfosecurityMagazine (Apr 17)

#NTLM脆弱性 #CVE202524054 #フィッシング攻撃 #APT28 #SMB認証

www.infosecurity-magazine.com/news/ntlm-ha...

Chrome extensions with 6 million installs have hidden tracking code A set of 57 Chrome extensions with 6,000,000 users have been discovered with very risky capabilities, such as monitoring browsing behavior, accessing cookies for domains, and potentially executing…

600万回インストールされたChrome拡張機能には隠されたトラッキングコードがある

Chrome extensions with 6 million installs have hidden tracking code #BleepingComputer (Apr 17)

#NTLM脆弱性 #CVE202524054 #フィッシング攻撃 #APT28 #SMB認証

www.bleepingcomputer.com/news/securit...

Windows NTLM hash leak flaw exploited in phishing attacks on governments A Windows vulnerability that exposes NTLM hashes using .library-ms files is now actively exploited by hackers in phishing campaigns targeting government entities and private companies.

Windows NTLMハッシュ漏洩の脆弱性が政府機関へのフィッシング攻撃に悪用される

Windows NTLM hash leak flaw exploited in phishing attacks on governments #BleepingComputer (Apr 17)

#NTLM脆弱性 #CVE202524054 #フィッシング攻撃 #APT28 #SMB認証

www.bleepingcomputer.com/news/securit...

la vulnerabilità cve-2025-24054 consente l’esfiltrazione di hash ntlmv2 con file library-ms, già sfruttata in campagne phishing su infrastrutture smb vulnerabili

#libraryms #attack2025 #CVE202443451 #CVE202524054 #disclosure #NTLM #NTLMv2 #passthehash
www.matricedigitale.it/sicurezza-in...