Separate actors exploited the same exposure, creating overlapping intrusions that obscured detection and response.

DotNetZip is a FAST, FREE class library and toolset for manipulating zip files. Use VB, C# or any .NET language to easily create, extract, or update zip files. DotNetZip is the best open-source ZIP ...

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. The flaw is a deserialization issue ...

Global attacks forced Microsoft to push emergency updates to address vulnerabilities. Two zero-day vulnerabilities are at the center of attacks against United States federal and state agencies, ...

Look, if you’re reading this in 2026, let’s drop the pretense. You didn’t choose WS-Federation for a shiny new greenfield project. You inherited it. You likely just took ownership of a legacy ...

The company has been called out repeatedly for inadequate security practices, and now we have another case in point: a successful SharePoint hack that’s among the worst in Microsoft’s history. Once ...

China-based threat actor Storm-2603 has been observed attacking on-premises SharePoint customers with Warlock ransomware. That comes from Microsoft, which on June 23 updated a blog post published the ...

Figure 2 shows the timeline of the attacks coming from the three most active IP addresses. Figure 2. Attacks from the most active IP addresses seen per hour (zero values not shown) Concerningly, ...

Microsoft has revealed that one of the threat actors behind the active exploitation of SharePoint flaws is deploying Warlock ransomware on targeted systems. The tech giant, in an update shared ...

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common Vulnerabilities and Exposures (CVEs), which have been confirmed as ...