Loading story…
Senator Ron Wyden has called on the FTC to investigate Microsoft for still using the outdated RC4 encryption algorithm. The concern centers on the Kerberoasting attack, which exploits weaknesses in the Kerberos authentication system. The use of RC4 is seen as a significant security risk in modern environments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
3 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
U.S. Senator Ron Wyden has called on the FTC to investigate Microsoft for alleged gross cybersecurity negligence following the 2024 ransomware attack on Ascension, which exposed 5.6 million patient records. Wyden's letter cites Microsoft's insecure default settings, continued support for the outdated RC4 encryption algorithm, and inadequate password policies as key enablers of the breach. He argues that Microsoft's market dominance and slow response to known vulnerabilities pose a systemic national security risk.
Jun 29, 2026Sen. Ron Wyden has urged the FTC to investigate Microsoft, alleging that security lapses in its products contributed to the 2024 ransomware attack on Ascension Health. The attack exploited weaknesses in Microsoft's Active Directory, specifically the Kerberoasting technique, leading to the compromise of 5.6 million individuals' data. Wyden's letter highlights longstanding concerns about Microsoft's default security settings and calls for regulatory intervention to address systemic risks to critical infrastructure.
Jun 29, 2026
Microsoft has announced it will disable the legacy RC4 cryptographic cipher by default in Windows Kerberos authentication, marking a significant move to strengthen enterprise and government network security. The change, set to roll out in stages and be fully enforced by mid-2026, will require domain controllers on Windows Server 2008 and later to use stronger AES-SHA1 encryption by default. RC4 will only be permitted if explicitly configured by a domain administrator, addressing longstanding concerns about the cipher's vulnerabilities and its persistence due to legacy system dependencies. Security experts have highlighted that RC4's continued use has enabled numerous attacks, including high-profile breaches such as the compromise of health giant Ascension, which exposed millions of patient records. The decision to deprecate RC4 follows mounting criticism, including calls from US lawmakers for regulatory scrutiny over Microsoft's default support for the outdated cipher. The move is widely regarded as one of Microsoft's most significant cryptographic cleanups in years, forcing organizations to modernize authentication systems and reduce exposure to attacks like Kerberoasting that exploit RC4 weaknesses.
Jun 29, 2026