Microsoft Maps Salesforce Attack Paths
Overview Microsoft has published new research mapping three distinct attack paths into Salesforce environments, all tied to a year of activity attributed to the ShinyHunters […]
MICROSOFT
Microsoft Entra ID Retires Passwords and SMS Codes
Overview Microsoft has announced a landmark change in Entra ID authentication, retiring phishable SMS and voice‑based MFA methods and making passkeys the default sign‑in method […]
Misconfigured Server Exposes – Targeting Microsoft 365
Overview A single misstep — leaving a Python web server with directory listing enabled — exposed the full toolkit of an attacker running a Microsoft […]
GigaWiper — Windows Backdoor
Overview Microsoft has dissected a destructive Windows backdoor dubbed GigaWiper, also tracked as BLUERABBIT by Binary Defense. Unlike typical malware, GigaWiper is a multi‑tool platform […]
Microsoft Defender Zero‑Day Exploit
Overview On July 9, 2026, Microsoft released a patch for a Microsoft Defender zero‑day vulnerability known as RoguePlanet (CVE‑2026‑50656). The flaw was disclosed by independent researcher Nightmare Eclipse, who […]
Hackers Exploit Microsoft Teams Calls
Overview A new cyber‑espionage campaign is turning Microsoft Teams into a weapon. Threat actors are now using fake IT support calls to trick employees into installing […]
Microsoft Fixes Bug
Overview Microsoft has resolved a known issue that caused the Copilot Chat and Copilot buttons to disappear from Classic Outlook for Windows, affecting users with the Copilot Chat (Basic) license. The fix, […]
EvilToken’s Microsoft 365 Phishing Toolkit
Overview A newly uncovered phishing‑as‑a‑service (PhaaS) platform called ARToken has revealed the inner workings of the EvilTokens phishing ecosystem — a sophisticated toolkit designed to compromise […]
Microsoft SharePoint Server Code Execution Vulnerability Exploited
Overview The Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed Microsoft SharePoint Server vulnerability (CVE‑2026‑45659) to its Known Exploited Vulnerabilities (KEV) catalog, confirming that the flaw is […]
When SharePoint Becomes the Entry Point
Overview Microsoft has detailed a sophisticated cyberattack campaign targeting unpatched on-premises SharePoint servers, highlighting how a single vulnerable system can become the gateway to a […]