ClearSky Cyber Security has identified a zero-day vulnerability in Windows systems, designated as CVE-2024-43451. The report provides the details. They analyzed a malware sample first submitted to VirusTotal on June 21st, 2024. Similar NTLM Hash leakage patterns were present in malware samples as early as April 10th, 2024. Microsoft has since released a patch in their November Patch Tuesday.
CVE-2024-43451 - Windows NTLM hash disclosure zero-day exploited
··1 min