Microsoft to fix two major attack methods for hackers

Executive summary: The report outlines two long-standing Windows post-exploitation weaknesses — Group Policy Preferences (GPP) cpassword exposure in SYSVOL and Pass‑the‑Hash credential reuse — that enable attackers to escalate privileges and move laterally. It references historical disclosures, public tooling (Metasploit), and Microsoft advisories/patches, while noting that mitigations may not fully eliminate the risks.