
- RC4 has been exploited in high-profile attacks across enterprise Windows networks
- Kerberoasting exploits weaknesses in Active Directory, allowing attackers to perform offline password cracking
- AES-SHA1 requires thousands of times more resources than RC4 for cracking
Microsoft is moving to disable RC4, an encryption cipher embedded in Windows authentication for more than two decades.