Microsoft is finally ripping out one of the weakest links in its identity stack, cutting off a legacy cipher that attackers have abused for years to walk straight into corporate networks. The move ...

RC4 has been exploited in high-profile attacks across enterprise Windows networks Kerberoasting exploits weaknesses in Active Directory, allowing attackers to perform offline password cracking ...

A Microsoft update that will disable the compromised RC4 stream cipher on Windows systems was released on Tuesday. The update is described in Security Advisory 2868725, but it seems to have gone ...

A fresh warning concerning the use of RC4 to support secure communication channels online has been issued after researchers were able to exploit the protocol to decrypt user data in mere hours.

About time: Microsoft introduced support for the RC4 stream cipher in Windows 2000 as the default authentication algorithm for the Active Directory services. The system has been insecure for even ...

The Mozilla Foundation will join fellow browser makers Microsoft and Google to disable the weak RC4 cipher in the upcoming 4.4 version of its Firefox web browser. RC4 was created by Ron Rivest, one of ...