logo

Microsoft Is Finally Killing RC4

ID: 5167dfb4-6e8e-58bc-9d41-360aff9524ed

STIX ID: report--5167dfb4-6e8e-58bc-9d41-360aff9524ed

Feed Name: Schneier on Security

Threat Score
70/100

Date Published: 2025-12-22

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

Microsoft announced it is finally deprecating RC4 for Windows authentication after decades of use; RC4 fallback has been exploited via Kerberoasting and was implicated in the breach of health provider Ascension (disrupting 140 hospitals and exposing 5.6 million patient records), prompting regulatory scrutiny and the removal of the obsolete cipher.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.