SecurityOnlineDdos
Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials
The article titled Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials was published on 17 October 2025. It highlights a zero-click NTLM credential leak described as a new LNK bypass, with a PoC available that bypasses a patch and exposes credentials. The report notes that access to the vulnerability report requires verified support, underscoring a paywall or supporter-based model.
It also lists relevant tags such as Credential Leak, LNK File, NTLM, NTLM Relay, patch bypass, Windows vulnerability, and Zero-Click. As presented, the piece situates the vulnerability within the broader context of Windows-related security flaws and ongoing disclosure practices.