Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Windows Authentication Reflection Bypass Lets Attackers Gain SYSTEM Shells
Malware Families
Excerpt
A working proof-of-concept (PoC) exploit for a newly disclosed authentication reflection bypass technique has enabled researchers to obtain full NT AUTHORITY\SYSTEM shells on fully patched Windows systems, exposing a fundamental weakness in Microsoft’s. The flaw CVE-2025-33073 was a critical Windows authentication reflection vulnerability that allowed attackers to force a privileged service to authenticate against a controlled server, then relay that authentication back…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-33073 | Medium | Score 43/100 | First seen |
| CVE | CVE-2026-24294 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…