⤷ Title: Critical HTTP Smuggling Flaw Patched in Microsoft ASP.NET Core Kestrel
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Oct 2025 03:57:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET #cybersecurity #HTTP Smuggling #Microsoft #vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Oct 2025 03:57:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET #cybersecurity #HTTP Smuggling #Microsoft #vulnerability
Penetration Testing Tools
Critical HTTP Smuggling Flaw Patched in Microsoft ASP.NET Core Kestrel
Microsoft patched a critical HTTP Request Smuggling flaw (CVE-2025-55315) in ASP.NET Core Kestrel that could lead to data exfiltration and session hijacking.
⤷ Title: Chinese Hackers Exploit Exposed ASP.NET Keys to Deploy TOLLBOOTH IIS Backdoor and Kernel Rootkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 00:26:42 +0000
════════════════════════
⌗ Tags: #Malware #ASP.NET Machine Key #China APT #IIS Backdoor #Kernel Rootkit #SEO Cloaking #TOLLBOOTH #Web Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 00:26:42 +0000
════════════════════════
⌗ Tags: #Malware #ASP.NET Machine Key #China APT #IIS Backdoor #Kernel Rootkit #SEO Cloaking #TOLLBOOTH #Web Shell
Daily CyberSecurity
Chinese Hackers Exploit Exposed ASP.NET Keys to Deploy TOLLBOOTH IIS Backdoor and Kernel Rootkit
Elastic exposed Chinese threat actors exploiting public ASP.NET machine keys to deploy TOLLBOOTH IIS backdoor and HIDDENDRIVER kernel rootkit. The malware performs stealthy SEO cloaking.
⤷ Title: Critical .NET Flaw (CVE-2025-55315) in QNAP: NAS Backup Utility Vulnerable to Credential Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 04:16:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASP.NET #cybersecurity #http_request_smuggling #Microsoft #NetBak #QNAP
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 04:16:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASP.NET #cybersecurity #http_request_smuggling #Microsoft #NetBak #QNAP
Daily CyberSecurity
Critical .NET Flaw (CVE-2025-55315) in QNAP: NAS Backup Utility Vulnerable to Credential Theft
QNAP warns its NetBak PC Agent users to patch a critical ASP.NET Core flaw (CVSS 9.8) that allows attackers to hijack credentials via HTTP request smuggling.
⤷ Title: Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:27:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT41 #ASP.NET #Check Point Research #cyber_espionage #Earth Alux #IIS Listener #Ink Dragon #Microsoft Graph API #Relay Network #ShadowPad
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:27:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT41 #ASP.NET #Check Point Research #cyber_espionage #Earth Alux #IIS Listener #Ink Dragon #Microsoft Graph API #Relay Network #ShadowPad
Daily CyberSecurity
Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
Ink Dragon is weaponizing government servers in Europe using a relay-centric mesh. By hijacking IIS servers, they mask C2 traffic across global networks.
⤷ Title: Malicious NuGet Packages Weaponize ASP.NET Identity for Production Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 00:13:36 +0000
════════════════════════
⌗ Tags: #Malware #ASP.NET Security #C2 Server #Identity and Access Management #infosec #Malware Dropper #NCryptYo #NuGet Attack #Socket Threat Research #supply chain attack #Typosquatting
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 00:13:36 +0000
════════════════════════
⌗ Tags: #Malware #ASP.NET Security #C2 Server #Identity and Access Management #infosec #Malware Dropper #NCryptYo #NuGet Attack #Socket Threat Research #supply chain attack #Typosquatting
Daily CyberSecurity
Malicious NuGet Packages Weaponize ASP.NET Identity for Production Backdoors
Socket researchers uncover a NuGet supply chain attack using "NCryptYo" to hijack ASP.NET apps. Attackers inject backdoors into production authorization layers.
⤷ Title: Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:21:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET 10 #ASP.NET Core #Authentication Bypass #CVE_2026_40372 #Data Protection #infosec #Key Rotation #Linux Security #macOS #Microsoft #privilege escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:21:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET 10 #ASP.NET Core #Authentication Bypass #CVE_2026_40372 #Data Protection #infosec #Key Rotation #Linux Security #macOS #Microsoft #privilege escalation
Daily CyberSecurity
Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
Microsoft's OOB update for .NET 10 (CVE-2026-40372) hits Linux/macOS users. Authentication is at risk. Stop the bypass and rotate your keys today.
⤷ Title: The Critical 9.1 Flaw in ASP.NET Core that Turns Cookies into Master Keys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:44:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #.NET 10 #ASP.NET Core #cryptography #CVE_2026_40372 #Cybersecurity 2026 #Data Protection #Infosec #Microsoft #Patch Tuesday #privilege escalation #web security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:44:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #.NET 10 #ASP.NET Core #cryptography #CVE_2026_40372 #Cybersecurity 2026 #Data Protection #Infosec #Microsoft #Patch Tuesday #privilege escalation #web security
Penetration Testing Tools
The Critical 9.1 Flaw in ASP.NET Core that Turns Cookies into Master Keys
An unforeseen regression within a software update has inadvertently caused a security mechanism to serve as a gateway
⤷ Title: New Knowledge Deliver RCE Vulnerability Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 09:58:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASP.NET ViewState #CVE_2026_5426 #cyber attack #Digital Knowledge #Knowledge Deliver #Mandiant #RCE vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 09:58:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASP.NET ViewState #CVE_2026_5426 #cyber attack #Digital Knowledge #Knowledge Deliver #Mandiant #RCE vulnerability
Daily CyberSecurity
New Knowledge Deliver RCE Vulnerability Exploited in the Wild
Learn how Mandiant uncovered the critical Knowledge Deliver RCE vulnerability (CVE-2026-5426) and how to protect your systems today.
⤷ Title: Cryptographic Homogeneity and Supply-Chain Contamination: Deconstructing the CVE-2026-5426 Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET hardcoded machineKey exploit #BLUEBEAM Godzilla web shell #Cobalt Strike BEACON dropper #Digital Knowledge LMS breach #IIS w3wp.exe memory forensics #KnowledgeDeliver CVE_2026_5426 patch #Mandiant threat intelligence telemetry #ViewState deserialization vulnerability #watering hole cyber attack #Windows Event ID 1316 anomaly
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET hardcoded machineKey exploit #BLUEBEAM Godzilla web shell #Cobalt Strike BEACON dropper #Digital Knowledge LMS breach #IIS w3wp.exe memory forensics #KnowledgeDeliver CVE_2026_5426 patch #Mandiant threat intelligence telemetry #ViewState deserialization vulnerability #watering hole cyber attack #Windows Event ID 1316 anomaly
Information Security News
KnowledgeDeliver CVE-2026-5426 Patch Fixes Critical RCE
Mandiant warns of CVE-2026-5426: a critical KnowledgeDeliver patch fixing hardcoded ASP.NET machine keys exploited to deploy BLUEBEAM web shells.
⤷ Title: Persistent Exposure: How OP-512 Exploits Legacy IIS Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 03:39:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASP.NET compilation bug #Chinese espionage tools #custom web shells #legacy IIS server hack #OP_512 threat group #ReliaQuest cyber report
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 03:39:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASP.NET compilation bug #Chinese espionage tools #custom web shells #legacy IIS server hack #OP_512 threat group #ReliaQuest cyber report
Information Security News
OP-512 Threat Group: New Legacy IIS Attacks
Discover how the OP-512 threat group targets legacy IIS servers. Learn about their bespoke web shells, Potato tools, and ReliaQuest defense tips.