Windows RDP Flaw: Old Passwords Grant Permanent Access

A shocking Windows security vulnerability allows old passwords to grant indefinite access via RDP, even after being changed on a Microsoft or Azure account. Windows caches credentials locally, meaning even if online verification fails, old passwords still work. This creates a 'silent remote backdoor,' allowing attackers to access systems even after account compromise, bypassing MFA and Conditional Access. Experts urge immediate action to address this critical flaw.