Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug

Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerability, tracked as CVE-2026-40372, carries a CVSS score of 9.1 out of 10.0. It's rated Important in severity. An anonymous researcher has been credited with discovering and reporting the flaw. "Improper verification of cryptographic
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
TN

The Hacker News

2d ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
DORA and operational resilience: Credential management as a fin…

Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. Here is what the regulation requires, and what a breach…
Noor Bakker

Noor Bakker

2026-04-24 17:09
0
thehackernews.com
NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. …

The Office of Inspector General (OIG) of the U. S. National Aeronautics and Space Administration (NASA) has revealed how a Chinese national posed as a U. S. re…
NightCurator

NightCurator

37m ago
0
schneier.com
Hiding Bluetooth Trackers in Mail

It was used to track a Dutch naval ship: Dutch journalist Just Vervaart, working for regional media network Omroep Gelderland, followed the directions posted o…
SS

Schneier on Security

42m ago
0
thehackernews.com
Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy …

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitat…
TN

The Hacker News

4h ago
0
thehackernews.com
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Discl…

A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild…
SA

SariMartinez

7h ago
0
darkreading.com
Tropic Trooper APT Takes Aim at Home Routers, Japanese Targets

The Chinese state-sponsored cyber threat is known for moving fast and trying odd attack vectors; now it's branching out in tools, victimology, and TTPs.
DR

Dark Reading

7h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. …

The Office of Inspector General (OIG) of the U. S. National Aeronautics and Space Administration (NASA) has revealed how a Chinese national posed as a U. S. re…
NightCurator

NightCurator

37m ago
0
thehackernews.com
Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy …

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitat…
TN

The Hacker News

4h ago
0
thehackernews.com
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Discl…

A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild…
SA

SariMartinez

7h ago
0
thehackernews.com
UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy …

A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a cust…
Marcus Allen

Marcus Allen

19h ago
0
thehackernews.com
Malicious KICS Docker Images and VS Code Extensions Hit Checkma…

Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository. In an alert published today, software…
EK

Emma Klein

1d ago
0
thehackernews.com
SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Rans…

Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called Syste…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest