THREATNOIR
SOC & Threat Hunting
Daily briefings + IOCs you can operationalize fast.
CISOs & Leaders
Board-ready context and weekly risk signal.
Learners
Learn from real incidents, not hypotheticals.
Builders
APIs, MCP, and automation-ready threat intel.
Feed
Briefs IOCs Legal
Podcast Weekly Roundup Reviews
Tips & Tricks Awareness Red vs Blue Show Events Resources
Developer
Subscribe
Log in
Back to show
Red vs Blue Show

Hardcoded Keys Let Attackers Own Every LMS

May 27, 2026 · 1:40

KnowledgeDeliver LMS instances shipped with identical hardcoded ASP.NET machine keys, allowing attackers to forge ViewState payloads and achieve remote cod…

X

Watch next

Ghost CMS SQL Injection Owns 700 Sites
1:40

Ghost CMS SQL Injection Owns 700 Sites

May 26, 2026

340 Million OnlyFans Records Stitched From Old Leaks
1:00

340 Million OnlyFans Records Stitched From Old Leaks

May 25, 2026

Eight-Year-Old Bug Powers Million-Router Botnet
1:40

Eight-Year-Old Bug Powers Million-Router Botnet

May 24, 2026

Malicious Postinstall Hooks Lurk in 700+ Repos
1:40

Malicious Postinstall Hooks Lurk in 700+ Repos

May 23, 2026

Defender Zero-Days Exploited Before Patch Tuesday
1:40

Defender Zero-Days Exploited Before Patch Tuesday

May 22, 2026

SonicWall MFA Bypass: Patched but Still Wide Open
1:40

SonicWall MFA Bypass: Patched but Still Wide Open

May 21, 2026

47 Zero-Days Drop at Pwn2Own Berlin
1:40

47 Zero-Days Drop at Pwn2Own Berlin

May 20, 2026

SHub Reaper Spoofs Apple Updates to Steal Everything
1:40

SHub Reaper Spoofs Apple Updates to Steal Everything

May 19, 2026

Tycoon2FA Weaponizes Device-Code Phishing for M365
1:40

Tycoon2FA Weaponizes Device-Code Phishing for M365

May 18, 2026

THREATNOIR

© 2026 ThreatNoir. All rights reserved.

FeedBriefsIOCsPodcastWeekly RoundupTipsAwareness LessonsResourcesDeveloperOpen SourceLegalContact
System status: nominal