Aggregator

3 Best Ways to Speed Up Alert Triage for SOC Team – Use Cases

Cyber Security News
10 months 1 week ago

Security analysts know the struggle: endless alerts, repetitive tasks, and not enough hours in the day. The volume of potential threats can be overwhelming, making efficient alert triage crucial for any Security Operations Center (SOC). The great news is that you don’t have to handle everything manually. By integrating cloud-based tools, automation, and AI-driven analysis, […]

The post 3 Best Ways to Speed Up Alert Triage for SOC Team – Use Cases appeared first on Cyber Security News.

Balaji N

Code injection attacks using publicly disclosed ASP.NET machine keys

Threat intelligence | Microsoft Security Blog
10 months 1 week ago

Microsoft Threat Intelligence observed limited activity by an unattributed threat actor using a publicly available, static ASP.NET machine key to inject malicious code and deliver the Godzilla post-exploitation framework. In the course of investigating, remediating, and building protections against this activity, we observed an insecure practice whereby developers have incorporated various publicly disclosed ASP.NET machine keys from publicly accessible resources, such as code documentation and repositories, which threat actors have used to launch ViewState code injection attacks and perform malicious actions on target servers.

The post Code injection attacks using publicly disclosed ASP.NET machine keys appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence

Managed ad