Endpoint Security Microsoft Disables Downloaded File Previews to Block NTLM Hash Leaks In files downloaded from the internet, HTML tags referencing external paths could be used to leak NTLM hashes during file previews. Ionut ArghireOctober 24, 2025