#aspNetMachinekey
LightNews LightNews
ahmandonk.bsky.social
📰 Celah Keamanan LMS KnowledgeDeliver Dieksploitasi Sebagai Zero-Day untuk Suntik Web Shell "Godzilla"

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/27/celah-knowledgedeliver-dieksploitasi-zero-day-web-shell/

#aspNe#aspNetMachinekeyt#beritaTeknologib#bluebeamBackdoorl#cobaltStrikeB
May 27, 2026 at 3:22 AM
hendryadrian.bsky.social
ConnectWise patched a critical flaw (CVE-2026-3564) in ScreenConnect before version 26.1 allowing attackers to extract ASP.NET machine keys, enabling session hijacking and privilege escalation. #ScreenConnect #Cryptography #USA
ConnectWise patches new flaw allowing ScreenConnect hijacking
ConnectWise has warned that ScreenConnect versions before 26.1 contain a critical cryptographic signature verification vulnerability (CVE-2026-3564) that can expose ASP.NET machine keys and enable unauthorized session authentication and privilege escalation. The vendor patched the issue in ScreenConnect 26.1—cloud instances were auto-upgraded, but on‑premises administrators must update and follow hardening guidance immediately. #ScreenConnect #ConnectWise #CVE-2026-3564 #ASPNetMachineKey
www.hendryadrian.com
March 19, 2026 at 3:00 AM