Attackers can steal NTLM password hashes via calendar invites

A recently patched vulnerability in Microsoft Outlook (CVE-2023-35636) that can be used by attackers to steal users’ NTLM v2 hashes can be exploited by adding two headers to an email carrying a specially crafted file, security researcher Dolev Taler has shared on Friday. He and his colleagues from Varonis Threat Labs have revealed two additional ways attackers can get users’ NTLM v2 hashes and use them for offline brute-force or authentication relay attacks. While CVE-2023-35636 … More →

The post …

attackers authentication calendar can cve cve-2023-35636 don't miss email enterprise exploited file hashes headers hot stuff labs microsoft microsoft outlook ntlm outlook password passwords researcher security security researcher smbs steal threat threat labs varonis vulnerability windows