Microsoft Warns of Surge
Overview Microsoft has issued a warning about a surge in ACR Stealer malware attacks targeting enterprise customers. The malware, believed to be a rebranding of […]
MICROSOFT
Windows LegacyHive Zero‑Day Exploit
Overview A security researcher known as Nightmare Eclipse has released a proof‑of‑concept (PoC) exploit for a new Windows zero‑day vulnerability dubbed LegacyHive. The flaw affects […]
Exploited SharePoint
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning that attackers are actively exploiting three SharePoint Server vulnerabilities — […]
Microsoft Patches 622 Flaws
Overview Microsoft’s July 2026 Patch Tuesday is its largest on record, addressing 622 CVEs — more than triple June’s previous high. Among them are two […]
Microsoft Maps Salesforce Attack Paths
Overview Microsoft has published new research mapping three distinct attack paths into Salesforce environments, all tied to a year of activity attributed to the ShinyHunters […]
Microsoft Entra ID Retires Passwords and SMS Codes
Overview Microsoft has announced a landmark change in Entra ID authentication, retiring phishable SMS and voice‑based MFA methods and making passkeys the default sign‑in method […]
Misconfigured Server Exposes – Targeting Microsoft 365
Overview A single misstep — leaving a Python web server with directory listing enabled — exposed the full toolkit of an attacker running a Microsoft […]
GigaWiper — Windows Backdoor
Overview Microsoft has dissected a destructive Windows backdoor dubbed GigaWiper, also tracked as BLUERABBIT by Binary Defense. Unlike typical malware, GigaWiper is a multi‑tool platform […]
Microsoft Defender Zero‑Day Exploit
Overview On July 9, 2026, Microsoft released a patch for a Microsoft Defender zero‑day vulnerability known as RoguePlanet (CVE‑2026‑50656). The flaw was disclosed by independent researcher Nightmare Eclipse, who […]
Hackers Exploit Microsoft Teams Calls
Overview A new cyber‑espionage campaign is turning Microsoft Teams into a weapon. Threat actors are now using fake IT support calls to trick employees into installing […]