logo

Microsoft Still Uses RC4

ID: 1f1603e7-922f-5792-a49a-1a2887d43ab4

STIX ID: report--1f1603e7-922f-5792-a49a-1a2887d43ab4

Feed Name: Schneier on Security

Date Published: 2025-09-16

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

A commentary arguing that fundamental design choices in authentication systems (illustrated with Kerberos and Kerberoasting) make them inherently vulnerable; changing those fundamentals would break compatibility or introduce new classes of vulnerabilities, and the piece highlights the difficulty of protecting shared secrets in offline or untrusted environments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.