CISA has added critical vulnerabilities in WSO2 products and Adobe Commerce to its Known Exploited Vulnerabilities catalog, mandating that federal…
Read More »Microsoft SharePoint
Entity category: technology
CVE-2026-55040, a critical JWT authentication bypass in Microsoft SharePoint, is being actively exploited in the wild within a day of…
Read More »
Microsoft's August 2026 Patch Tuesday fixes over 400 vulnerabilities, including an actively exploited zero-day (CVE-2026-68820) in Windows AFD.sys linked to…
Read More »
Swiss federal IT agency BIT confirmed hackers breached its Microsoft SharePoint servers by exploiting known vulnerabilities, compromising roughly 200 user…
Read More »
Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys, allowing them to forge authentication…
Read More »
Microsoft's July 2026 Patch Tuesday set a record by addressing 570 vulnerabilities, nearly tripling last month's total, largely due to…
Read More »
Day one of Pwn2Own Berlin 2026 awarded $523,000 for 24 zero-day exploits, with DEVCORE's Orange Tsai earning $175,000 for a…
Read More »
Phishing regained its position as the top initial access method in Q1 2026, accounting for over a third of engagements,…
Read More »
A new, sophisticated phishing-as-a-service platform called VENOM has been targeting high-level corporate executives since at least November 2025, using a…
Read More »
A foreign actor breached the Kansas City National Security Campus by exploiting unpatched Microsoft SharePoint vulnerabilities, revealing critical cybersecurity flaws…
Read More »
The ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint is a critical zero-day flaw that allows unauthenticated remote attackers to execute arbitrary…
Read More »
Anthropic has integrated its Claude AI assistant with Microsoft 365 apps like Teams, Outlook, and OneDrive, enabling automatic retrieval and…
Read More »
Colt Technology Services has confirmed a significant data breach potentially exposing sensitive customer information, revising earlier assurances that the attack…
Read More »
Critical vulnerabilities in WinRAR (CVE-2025-8088) and Microsoft Kerberos (CVE-2025-53779) are being actively exploited, with Russian organizations targeted by the WinRAR…
Read More »
Colt Technology Services is facing a major cyberattack disrupting critical operations since August 12, with hackers attempting to sell stolen…
Read More »
OpenAI is upgrading ChatGPT with third-party integrations (e.g., Dropbox, Notion) and refined GPT-5 access, prioritizing paid subscribers with higher usage…
Read More »
Summer 2025 saw a surge in cyber threats, with ransomware attacks on hospitals, retail breaches, and geopolitical cyber campaigns reshaping…
Read More »
A critical Microsoft SharePoint vulnerability (CVE-2025-53770/53771) compromised 396 systems globally, with the U.S. accounting for nearly a third of attacks…
Read More »
A Chinese hacking group (Storm-2603) is exploiting SharePoint vulnerabilities to deploy Warlock ransomware, targeting over 420 unpatched systems using zero-day…
Read More »
A cyberattack exploiting a Microsoft SharePoint vulnerability compromised systems at the U.S. National Nuclear Security Administration (NNSA), though officials confirmed…
Read More »