Topic: active exploitation reports
-
Microsoft Warns of Active Attacks on On-Prem SharePoint Servers
Microsoft warns of active cyberattacks targeting on-premises SharePoint servers, risking sensitive data in critical industries like government and healthcare. Attackers bypass MFA and SSO protections, exploiting vulnerabilities (CVE-2025-53770 and CVE-2025-53771) to steal data and compromise link...
Read More » -
Urgent: Patch Citrix Bleed 2 NetScaler flaw as exploits go public
A critical Citrix NetScaler vulnerability (CVE-2025-5777) allows attackers to steal session tokens by exploiting malformed login requests to dump memory contents, similar to last year's CitrixBleed flaw. The flaw arises from improper use of the snprintf function, leaking ~127 bytes of memory per ...
Read More »