Hackers Can Steal IIS Machine Keys by Exploiting SharePoint Deserialization Vulnerability

A sophisticated attack method where hackers are exploiting a deserialization vulnerability in SharePoint to steal Internet Information Services (IIS) Machine Keys. This enables attackers to bypass security measures, forge trusted data, and ultimately achieve persistent Remote Code Execution (RCE) on compromised servers. According to SANS researcher Bojan Zdrnja, the attack begins with the exploitation of […]

The post Hackers Can Steal IIS Machine Keys by Exploiting SharePoint Deserialization Vulnerability appeared first on Cyber Security News.