A Newly Discovered Zero-Day Exposes NTLM Credentials to Theft by Lucie Cardiet

A 0patch-disclosed zero-day in Windows enables attackers to steal NTLM hashes when a user views a malicious file in File Explorer, affecting Windows 7/Server 2008 R2 through Windows 11 24H2/Server 2022. The flaw requires minimal interaction, can expose credentials used for lateral movement and privilege escalation, and currently lacks an official Microsoft fix; the report emphasizes mitigation, detection, and Vectra AI's identity-focused defenses.