CISA added a Microsoft SharePoint RCE flaw to its exploited bugs catalog after confirming active attacks on unpatched servers.

Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even Microsoft Developer Tools. Windows admins are going to be busy this month, ...

We have already seen attackers abuse SharePoint in phishing campaigns, and now hackers appear to have found a way to bypass Windows security itself. A new Windows malware campaign shows how attackers ...

Microsoft told Windows Latest that it disabled the File Explorer Preview pane in Windows 11 25H2 and 24H2 for internet downloaded files. This causes “The file you are attempting to preview could harm ...

Security researchers have discovered a new ransomware variant that exploits previously known SharePoint vulnerabilities. The 4L4MD4R ransomware, based on open-source code, spreads via a failed ...

Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader exploitation campaign that has already led to the breach of at least 148 ...

On July 8, 2025, vulnerabilities CVE-2025-49704 (Remote Code Execution) and CVE-2025-49706 (Network Spoofing), affecting on-premises Microsoft SharePoint servers, were officially reported. On the same ...

Republished on July 26 with new warnings for users of Chrome and other platforms a as the threat of new attacks quickly escalates. If you use a Windows, it’s likely Chrome is installed as the default ...

If you are working from a single mapped SharePoint drive rather than multiple SharePoint sites, you may prefer the direct Files-Hudu-Migration tool. However, for environments with multiple SharePoint ...

A new phishing campaign leveraging the open-source Havoc command-and-control (C2) framework has been discovered. Attackers are using modified versions of Havoc Demon Agent alongside Microsoft Graph ...

Cybersecurity researchers are calling attention to a new phishing campaign that employs the ClickFix technique to deliver an open-source command-and-control (C2) framework called Havoc. "The threat ...