CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...
The Hacker News

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

CISA added CVE-2026-45659 SharePoint Server RCE to KEV following confirmed exploitation, requiring U.S. agencies to patch by ...
SecurityWeek

BlueHammer Vulnerability Exploited in Ransomware Attacks

A Microsoft Defender vulnerability tracked as BlueHammer and CVE-2026-33825 is being exploited in ransomware attacks ...
CSO Online

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
SecurityWeek

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

Cisco confirmed that hackers are exploiting CVE-2026-20230, a Unified CM vulnerability allowing privilege escalation to root.
Windows Report

CISA Warns Microsoft SharePoint Flaw Is Actively Exploited

CISA added a Microsoft SharePoint RCE flaw to its exploited bugs catalog after confirming active attacks on unpatched servers ...

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
Security

SecurityBridge unveils AI-powered Code Vulnerability Analyzer to strengthen SAP security

SecurityBridge today announced the launch of its SecurityBridge Code Vulnerability Analyzer (CVA) powered by AI, a significant enhancement to its holistic SAP security platform. This tool leverages ...