Microsoft confirms a 3-phase strategy to deprecate NTLM, improve auditing, prioritize Kerberos, and disable NTLM by default ...

Microsoft has detailed a three-phased roadmap leading to NTLM being completely disabled in the next version of Windows Server ...

Microsoft is preparing one of the most consequential security shifts in Windows in decades, turning off NTLM authentication ...

Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases ...

Server: Fully-patched 2008 R2, running Certificate Services. The /certsrv virtual directory is using (I believe) default settings. Specifically, this means it's using Windows Authentication, with NTLM ...

Yaron Kassner, CTO at Silverfort, discusses authentication-bypass bugs in Cisco ASA, F5 Big-IP, IBM QRadar and Palo Alto Networks PAN-OS. Authentication is the front gate to security systems, so if ...

Several readers responded to my previous post on pass-the-hash attacks, asking if Kerberos authentication versus LANManager, NTLM, or NTLMv2 was an effective defense. It’s a good question, one that I ...

Microsoft is working on a fix for a bug in last week's patch for a bypass vulnerability in the Kerberos Key Distribution Center (KDC) security feature. Microsoft has flagged the issue affecting ...

Heres a quick question I'm having trouble finding a straight answer too in the RK or other sources, and I don't have time to model it in the test lab before our meeting (argument) next week.<P>If an ...