Older article re:Zero-Day MSFT
https://westoahu.hawaii.edu/cyber/gmr-2-satellite-phones-windows-rdp-and-relay-attack-0-day/
The researchers at Preempt, innovators in next gen firewalls discovered 2 different zero-day vulnerabilities in the Windows NTLM security protocols. The result of both zero-days, ends in attackers creating new domain administrator accounts with elevated privileges allowing control of the whole domain.