Microsoft Linked to MacSync Stealer
Overview On August 18, 2026, Microsoft Defender Experts revealed that they have linked more than 30 rotating domains to the MacSync Stealer, a macOS‑focused information […]
MICROSOFT
Microsoft Removing WMIC Tool
Overview Microsoft has officially removed the Windows Management Instrumentation Command‑line (WMIC) tool from Windows 11 versions 24H2 and 25H2, as well as from beta builds […]
Microsoft SCCM Vulnerability
Overview Security researchers have disclosed a serious attack chain affecting Microsoft System Center Configuration Manager (SCCM). The flaws could allow attackers to execute malicious code […]
SentinelOne Shield Malware
Overview At DEF CON 34, researchers revealed a novel “Bring Your Own EDR” (BYOEDR) attack that abuses trusted SentinelOne components to transform endpoint protection into […]
New Microsoft SharePoint Exploit
Overview A newly disclosed Microsoft SharePoint vulnerability (CVE‑2026‑55040) is already being weaponized in attacks, just days after a proof‑of‑concept (PoC) exploit was published by Rapid7. […]
Swiss Government SharePoint Servers Breached
Overview Swiss federal authorities have confirmed a cyberattack targeting SharePoint servers operated by the Federal Office for Information Technology and Telecommunication (BIT). The incident led […]
WSUS Servers to Deliver Malware
Overview New research from SpecterOps reveals how adversaries can hijack Windows Server Update Services (WSUS) to deliver malware disguised as trusted updates. By exploiting architectural […]
Phishing Service – Steals Microsoft 365 Accounts
Overview The Greatness phishing‑as‑a‑service (PhaaS) platform has expanded its arsenal, moving beyond credential theft into adversary‑in‑the‑middle (AiTM) attacks and device‑code phishing. In its latest campaign, […]
Microsoft Defender Stops Ransomware Attack in 128 Seconds
Overview Ransomware thrives on speed, often turning a single careless click into a full‑scale organizational crisis. A recent incident at QNET demonstrates how Microsoft Defender’s […]
Custom Malware Breached Microsoft 365 Accounts
Overview Microsoft has attributed a global campaign targeting hospitality Wi‑Fi networks to the Russian threat actor Midnight Blizzard (APT29), also tracked as Storm‑2945. The campaign, […]