CVE-2025-24054: NTLM Vulnerability Under Active Exploitation

CVE-2025-24054 has just been added to CISA’s KEV Catalog — and it's being actively exploited! This critical vulnerability targets NTLM (New Technology LAN Manager) through a spoofing attack using .library-ms files.

What’s the risk?
Attackers can use specially crafted .library-ms files to trick users into connecting to malicious servers, exposing NTLM hashes or passwords. This can lead to credential theft and lateral movement in Windows environments.


#CVE202524054 #NTLM #WindowsVulnerability #CyberSecurity #CISA #ZeroDay #LibraryMS #CarbonBlack #Symantec #Infosec #CredentialTheft #ActiveExploitation #HackerNews