On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site

Microsoft on Monday revised its advisory for a now-patched, high-severity security flaw impacting Windows Shell to acknowledge that it has been actively exploited in the wild. The

<h2> Threat Overview </h2> <p>🚨 Microsoft SharePoint now has a critical flaw, CVE-2026-55040, that has already started being exploited in the wild.<br /> ⚠️ The vulnerability

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

<h1> CVE-2026-65660: a SharePoint code injection reachable with an ordinary user account </h1> <p>SharePoint is rarely treated as a perimeter system, which is why a flaw in it

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The