--- title: Mandiant pushes organizations to dump insecure NTLMv1 by... description: Google's Mandiant released a pre-computed rainbow table that makes cracking NTLMv1 authentication credentials trivial, allowing recovery of keys in 12 hours... canonical: https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it | daily.dev og:description: Google's Mandiant released a pre-computed rainbow table that makes cracking NTLMv1 authentication credentials trivial, allowing recovery of keys in 12 hours... og:url: https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb og:image: https://api.daily.dev/og/posts/2zIsiW8Fb.png og:image:alt: Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it **[CSO Online](https://daily.dev/sources/csoonline)** · 4 min read · 0 upvotes · 0 comments ## Summary Google's Mandiant released a pre-computed rainbow table that makes cracking NTLMv1 authentication credentials trivial, allowing recovery of keys in 12 hours using a $600 computer. This controversial move aims to force organizations to finally abandon the insecure 1990s protocol that remains prevalent despite decades of warnings. NTLMv1, based on 1980s DES encryption and replaced by Kerberos in 1996, persists as a legacy fallback in Windows environments, often hidden in third-party firmware like printers. Attackers actively exploit it through phishing and relay attacks. Microsoft recently removed NTLMv1 support from Windows Server 2025 and Windows 11, but many organizations still unknowingly run it in their networks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Microsoft disables NTLM in Windows](https://daily.dev/posts/microsoft-disables-ntlm-in-windows-ufefrejra) · CSO Online · 0 upvotes · 0 comments - [How NTLM is being abused in 2025 cyberattacks](https://daily.dev/posts/how-ntlm-is-being-abused-in-2025-cyberattacks-8ykyvkbiq) · Securelist · 0 upvotes · 0 comments - [NTLM and SMB go opt-in](https://daily.dev/posts/ntlm-and-smb-go-opt-in-lteuvdtbo) · daniel.haxx.se · 1 upvotes · 0 comments - [Microsoft will finally kill obsolete cipher that has wreaked decades of havoc](https://daily.dev/posts/microsoft-will-finally-kill-obsolete-cipher-that-has-wreaked-decades-of-havoc-g4sq3pvci) · Ars Technica · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#windows](https://daily.dev/tags/windows), [#authentication](https://daily.dev/tags/authentication), [#active-directory](https://daily.dev/tags/active-directory) [View this post on daily.dev](https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it","url":"https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb"},"datePublished":"2026-01-19T21:28:28.022Z","dateModified":"2026-08-24T08:20:11.779Z","description":"Google's Mandiant released a pre-computed rainbow table that makes cracking NTLMv1 authentication credentials trivial, allowing recovery of keys in 12 hours...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ae4cc7d1102219c46b7cc5b8ea5d36d9?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ae4cc7d1102219c46b7cc5b8ea5d36d9?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/mandiant-pushes-organizations-to-dump-insecure-ntlmv1-by-releasing-a-way-to-crack-it-2zisiw8fb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,windows,authentication,active-directory","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it"}]} ```