Story perspectives

Microsoft Warns: 3,000 Exposed Keys Risk Major Attacks

2/8/2025

36 8

Summary

Story summary

Microsoft has issued a stark warning: more than 3,000 publicly exposed ASP.NET machine keys are at risk of exploitation, paving the way for dangerous ViewState code injection attacks. Recently, an unknown attacker leveraged a static machine key to unleash the Godzilla framework, seizing control of vulnerable servers. Developers are urged to keep keys private, rotate them frequently, and perform comprehensive security audits to safeguard their systems.

1 of 1

Story summary

Microsoft has issued a stark warning: more than 3,000 publicly exposed ASP.NET machine keys are at risk of exploitation, paving the way for dangerous ViewState code injection attacks. Recently, an unknown attacker leveraged a static machine key to unleash the Godzilla framework, seizing control of vulnerable servers. Developers are urged to keep keys private, rotate them frequently, and perform comprehensive security audits to safeguard their systems.