How I Discovered CVE-2025-21311: The Breakdown and Why It Matters
Late last year (2024), while testing the new-at-the-time Windows Server 2025, I had set up Active Directory (AD) with Network Policy Server (NPS) and configured RADIUS using MSCHAPv2 for authentication. Everything seemed normal, until I noticed something that didn’t make sense. The Discovery Shortly after setting up the new test environment and configuring network devices […]
