Authentication reflection was thought to be solved after MS08-068, but recent research shows that Windows still exposes multiple ways to coerce systems into authenticating to themselves. This talk explores modern reflection techniques involving Kerberos, NTLM, and SPN manipulation, and how they can still lead to privilege escalation or even domain compromise. I will also present a critical reflection vulnerability in Windows Admin Center (WAC) discovered in July 2025 and fixed by Microsoft in early 2026.