InfoSec (@infosec.skyfleet.blue)

Microsoft Is Finally Killing RC4 - Schneier on Security After twenty-six years, Microsoft is finally upgrading the last remaining instance of the encryption algorithm RC4 in Windows. of the most visible holdouts in supporting RC4 has been Microsoft. Eventually, Microsoft upgraded Active Directory to support the much more secure AES encryption standard. But by default, Windows servers have continued to respond to RC4-based authentication requests and return an RC4-based response. The RC4 fallback has been a favorite weakness hackers have exploited to compromise enterprise networks. Use of RC4 played a ... https://www.schneier.com/blog/archives/2025/12/microsoft-is-finally-killing-rc4.html