NEW WINDOWS ZERO-DAY EXPOSES NTLM CREDENTIALS, GETS UNOFFICIAL PATCH

Summary from the TLDR InfoSec newsletter

A new zero-day vulnerability in Windows lets attackers steal NTLM credentials by tricking users into viewing a malicious file in Windows Explorer. The issue affects various Windows versions, from Windows 7 to Windows 11. An unofficial patch is available from the 0patch team until Microsoft releases an official fix.