NTLM protocol has existed for many years and has several versions. Indeed NTLMv1 protocol is insecure and shouldn't be used as per Microsoft recommendations.

EasySSO is using IOPLEX Jespa - the only pure Java implementation of NTLMv2 based authenticator. NTLMv2 protocol is not considered insecure.