Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Ravie LakshmananAug 13, 2026Vulnerability / Enterprise Security Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following...
Enterprise
Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none....
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Security researchers found a way to enter Microsoft SharePoint servers as any user,...
Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Windows Plug and Play can be abused to fetch signed vendor software for...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come...
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
Ravie LakshmananAug 04, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity...
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Ravie LakshmananAug 01, 2026Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign...
The Hidden Security Problem Holding Enterprise AI Back
When an AI agent completes a task inside your enterprise systems, can you say with certainty which agent did it,...
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Broadcom has released security updates to address multiple security flaws impacting VMware ESX,...
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Cybersecurity researchers have shared additional technical details about a recently patched critical security...
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
Ravie LakshmananJul 28, 2026Vulnerability / Enterprise Security JetBrains is urging customers of on-premise versions of TeamCity to update to the...
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Swati KhandelwalJul 27, 2026Vulnerability / Enterprise Security n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Swati KhandelwalJul 24, 2026Vulnerability / Enterprise Security Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that...
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session...
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Ravie LakshmananJul 16, 2026Vulnerability / Enterprise Security Zoom has released security updates for a critical security flaw impacting Zoom Workplace...
