CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDdos

Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials

The article titled Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials was published on 17 October 2025. It highlights a zero-click NTLM credential leak described as a new LNK bypass, with a PoC available that bypasses a patch and exposes credentials. The report notes that access to the vulnerability report requires verified support, underscoring a paywall or supporter-based model.

It also lists relevant tags such as Credential Leak, LNK File, NTLM, NTLM Relay, patch bypass, Windows vulnerability, and Zero-Click. As presented, the piece situates the vulnerability within the broader context of Windows-related security flaws and ongoing disclosure practices.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device