Addressing Windows LegacyHive Zero-Day Flaw with New Patches
Windows LegacyHive local privilege escalation zero-day allows attackers to gain elevated privileges on up-to-date Windows systems.
Sunday, July 26
Friday, July 24
Invisible Comments in Azure DevOps Pose AI Security Threat
PremiumAzure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.
Chaos Ransomware Exploits Browsers for Stealthy Command Channels
PremiumChaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.
Monday, July 20
Microsoft Highlights Rising Threat of ACR Stealer Attacks
PremiumMicrosoft reports a surge in ACR Stealer attacks exfiltrating browser credentials, tokens, and sensitive documents from customers.
Wave of Cyber Vulnerabilities: From AI to WordPress
PremiumNewsletter aggregates multiple incidents including EY breach, wp2shell exploit, and numerous high-impact patches and breaches.
New SharePoint Vulnerability Exploited Promptly After Disclosure
PremiumA critical SharePoint vulnerability is being exploited in the wild shortly after disclosure, allowing remote authenticated code execution.
Scattered Spider Hackers Sentenced for Disruptive TfL Cyber Attack
PremiumTwo Scattered Spider members jailed for a 2024 attack disrupting 148 TfL systems and forcing 27,000 staff password resets.
Friday, July 17
Compromised AsyncAPI npm Packages Unleash Complex Botnet Malware
PremiumFour @asyncapi npm packages were compromised to distribute a multi-stage botnet loader with credential-stealing payloads.
Critical BitLocker Vulnerability Exposes Windows Devices to Physical Attacks
PremiumBitLocker zero-day CVE-2026-50661 allows physical attackers with hands-on access to bypass device encryption protections.
Microsoft-Revoked UEFI Shims Pose Secure Boot Bypass Risk
PremiumEleven Microsoft-signed legacy UEFI shims can be abused to bypass Secure Boot, undermining platform integrity across devices.
LegacyHive Zero-Day Exploit Puts Windows User Profiles at Risk
PremiumResearcher published LegacyHive Windows zero-day PoC impacting User Profile Service, enabling arbitrary hive load privilege escalation.
Microsoft's Largest Patch Tuesday Addresses Over 600 Vulnerabilities, Including Active Zero-Day Exploits
PremiumMicrosoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.
Wednesday, July 15
Forg365 PhaaS: A New Threat to Microsoft 365 Security
Forg365 phishing-as-a-service uses device-code phishing, AitM, AI lures, and mailbox operations to compromise Microsoft 365 accounts for customers.
Misconfigured Server Unveils Trio of Phishing Operations Targeting Microsoft 365
Directory listing on misconfigured server exposed three Evilginx phishing operations that bypass MFA to target Microsoft 365 users.
Sophisticated OAuth Client ID Spoofing Tactics Threaten Microsoft Entra Security
Novel OAuth client ID spoofing enables attackers to validate stolen Microsoft Entra credentials and enumerate accounts while evading telemetry.
New Phishing Kits Exploit MFA Vulnerabilities in Microsoft 365
Jalisco and OmegaLord phishing kits target Microsoft 365, using MFA-evasion techniques to steal credentials and session tokens.
CISA Alerts Organizations to SharePoint Vulnerability Exploits
CISA issues alert urging immediate SharePoint hardening after new exploitations affecting enterprise SharePoint environments were observed.
Microsoft's July 2026 Patch Tuesday Addresses Record 570 Vulnerabilities, Including Critical Zero-Days
Record Patch Tuesday: Microsoft released fixes for hundreds of vulnerabilities, including multiple zero-days; urgent prioritization required.
Monday, July 13
Get these articles delivered to your inbox.
Subscribe free