Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

NTLM Relay Attacks: Back from the Dead - and Still Haunting Active Directory

NTLM Relay attacks should be history. Yet in 2025, they remain one of the most effective ways to compromise Active Directory. We first covered this problem back in 2020, when we wrote about a troubling vulnerability that refused to die: NTLM Relay attacks. At the time, many believed NTLM Relay attacks were a relic of the past, an old problem long solved by Kerberos and modern authentication protocols.