A ransomware attack on SmarterTools began via an unpatched, employee-created virtual machine running outdated SmarterMail software, which allowed lateral movement…
Read More »Microsoft Exchange
Entity category: technology
A Jordanian man, Feras Khalil Ahmad Albashiti, pleaded guilty to fraud for selling illegal access to the networks of dozens…
Read More »
A joint advisory from cybersecurity agencies recommends a proactive, multi-layered security strategy for Microsoft Exchange servers, including decommissioning outdated on-premises…
Read More »
A Chinese state-sponsored hacking group known as Murky Panda or Silk Typhoon exploits trusted cloud service relationships to infiltrate networks…
Read More »
Over 29,000 Microsoft Exchange servers remain vulnerable to CVE-2025-53786, a critical flaw allowing attackers to escalate access in hybrid cloud…
Read More »
A critical Microsoft Exchange vulnerability (CVE-2025-53786, CVSS 8.0) threatens hybrid cloud environments, enabling privilege escalation across on-premises and cloud systems…
Read More »
A critical zero-day vulnerability in Microsoft SharePoint (CVE-2025-53771) is being actively exploited, risking data breaches for businesses and government agencies.…
Read More »
A sophisticated cyberattack targeted Washington Post journalists, compromising email accounts of reporters covering national security, economic policy, and China, with…
Read More »