Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication https://specterops.io/blog/2026/10/23/ldap-signing-bypass-ntlm-relay/
SpecterOpsSigned, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through ReauthenticationAn LDAP signing bypass let attackers relay NTLM to domain controllers even with signing required. Why the October 2026 patch matters.