Organization
526 Interestana reports mention Microsoft, newest first. Each links back to its publisher, with an AI summary of the original reporting where we have found no publisher terms that forbid one.
A critical vulnerability has been identified in Microsoft's Azure DevOps MCP server, enabling attackers to hijack AI coding review agents through hidden comments within pull requests. This flaw allows an attacker to inject malicious instructions into a pull request description…
A critical vulnerability in Microsoft Office SharePoint, designated CVE-2026-50522, is currently under active exploitation, according to a July 2026 report by watchTowr. This flaw, which carries a CVSS score of 9.8, involves the deserialization of untrusted data within SharePoint Server.
A novel espionage implant, identified as HollowGraph by cybersecurity firm Group-IB, has been discovered utilizing hijacked Microsoft 365 calendars to establish its command and control (C2) channel. This sophisticated malware embeds operator instructions and smuggles stolen files by attaching them…
This week saw significant cybersecurity threats emerge, including critical vulnerabilities affecting widely used platforms. A remote code execution (RCE) flaw was identified in WordPress, allowing attackers to compromise websites with a single malicious request.
ACR Stealer, an infostealer active since 2024, is successfully exfiltrating sensitive data from enterprise networks, including saved browser passwords, active session tokens, PDF documents, Microsoft 365 files, and data from synced OneDrive and SharePoint folders.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical remote code execution (RCE) vulnerability affecting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog on Thursday. This newly patched flaw, identified as CVE-2026-58644, carries a critical CVSS…