Microsoft zero-day LegacyHive: powerful but not the promised haymaker

Security researchers have analyzed LegacyHive, a zero-day exploit from a known Microsoft tormentor, and found it to be a useful post-compromise tool rather than the devastating attack initially feared. The exploit requires significant attacker skill and access to be effective. Experts say it's a potent addition to an attacker's toolkit but not a game-changer on its own.