Do Son Ink Dragon is weaponizing government servers in Europe using a relay-centric mesh. By hijacking IIS servers, they mask C2 traffic across global networks.
ASP.NET
QNAP warns its NetBak PC Agent users to patch a critical ASP.NET Core flaw (CVSS 9.8) that allows attackers to hijack credentials via HTTP request smuggling.
A coordinated disclosure by Mandiant and Sitecore has revealed the active exploitation of a critical configuration vulnerability...
Unit 42 reveals "Gold Melody" uses leaked ASP.NET Machine Keys to achieve in-memory RCE via View State deserialization and privilege escalation via GodPotato, compromising web servers.
Recently, the OData team announced on the Microsoft Developer Blog that ASP.NET Core 2.0 has officially supported the OData standard, and...