News

Attackers snooping around Sitecore, dropping malware via public sample keys

The Register · last updated

You cut and pasted the machine key from the official documentation? Ouch

Unknown miscreants are exploiting a configuration vulnerability in multiple Sitecore products to achieve remote code execution via a publicly exposed key and deploy snooping malware on infected machines.…