Source |
The Hacker News |
Identifiant |
8647404 |
Date de publication |
2025-02-07 16:31:00 (vue: 2025-02-07 12:08:33) |
Titre |
Microsoft Identifies 3,000+ Publicly Disclosed ASP.NET Machine Keys Vulnerable to Code Injection |
Texte |
Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers\' pathway.
The tech giant\'s threat intelligence team said it observed limited activity in December 2024 that involved an unknown threat actor using a publicly available, static ASP.NET
Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers\' pathway.
The tech giant\'s threat intelligence team said it observed limited activity in December 2024 that involved an unknown threat actor using a publicly available, static ASP.NET |
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
000+ 2024 accessible activity actor applications are asp attackers available code december developers disclosed from giant identifies incorporating injection insecure intelligence involved keys limited machine microsoft net observed pathway practice publicly putting resources said software static team tech thereby threat unknown using vulnerable warning wherein |
Tags |
Threat
|
Stories |
|
Move |
|