Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and ...
Towr reports active exploitation of SharePoint CVE-2026-50522 after a public PoC, with attackers stealing machine keys for ...
Microsoft has delayed Exchange Online PowerShell's credential cutoff to December 2026, while scripts using stored passwords ...
Microsoft has warned that attackers are varying their post-exploitation techniques while relying on the same ClickFix lure, ...
It's an absolute beast with over 700 fixes and active zero-days landing right as major SQL and SharePoint versions hit end of ...
The Cybersecurity and Infrastructure Security Agency has issued an alert warning of four Microsoft SharePoint vulnerabilities ...
ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...
Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.
Microsoft postponed a major Exchange Online PowerShell authentication change until December 2026 following concerns from ...
From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Microsoft Patch Tuesday July 2026 delivers 622 CVEs, the largest release in company history, with two exploited zero-days in ...
CISA urges immediate patching of five SharePoint vulnerabilities, including three that are actively exploited in the wild.