Microsoft Disables Downloaded File Previews to Block NTLM Hash Leaks

Source: SecurityWeek

In a bid to improve security, Microsoft has disabled file previews for downloaded content from the internet, addressing a critical vulnerability associated with NTLM hash leaks. By disabling these previews, the company aims to mitigate the potential risks of exposing sensitive authentication tokens that could be exploited by cybercriminals.

The decision to block these previews is an important step in safeguarding user data and enhancing overall cybersecurity. When users download files that contain HTML elements referencing external paths, there exists a risk of unintended exposure of NTLM hashes. This can open the door for attackers to gain unauthorized access to systems, leading to data breaches and other malicious activities. The implications of such security measures are critical in an increasingly digital world where the stakes of cyber threats continue to rise.

👉 Pročitaj original: SecurityWeek