From Domain User to System: NTLM LDAP Authentication Bypass (CVE-2025-54918)
CrowdStrike research describes CVE-2025-54918, a critical evolution of coercion and NTLM relay techniques that can allow attackers to coerce a domain controller into authenticating to an attacker-contβ¦
Category: Threat Alerts / Vulnerabilities & Exploits / Authentication & Access Control