cybersecurity threats

A critical security vulnerability, identified as CVE-2025-53792, has been disclosed in the Azure Portal, Microsoft's web-based application for managing Azure services. This elevation of privilege vulnerability allows authenticated attackers to gain unauthorized administrative access, posing...

A newly disclosed security flaw in Microsoft Exchange hybrid deployments is triggering urgent action among IT administrators worldwide, as Microsoft warns of a critical vulnerability—CVE-2025-53786—that exposes hybrid environments to stealthy privilege escalation attacks. As organizations...

A critical security vulnerability, identified as CVE-2025-53786, has been discovered in hybrid deployments of Microsoft Exchange Server. This flaw allows attackers with local administrative access to escalate their privileges within connected cloud environments, posing significant risks to...

A newly disclosed exploit chain targeting Microsoft SharePoint servers is sending shockwaves across enterprise IT and cybersecurity circles, revealing a sophisticated blend of zero-day and known vulnerabilities that enable cyber attackers to gain near-total control of systems. Security agencies...

A new wave of critical vulnerabilities in Microsoft SharePoint has come to light with the release of a comprehensive Malware Analysis Report (MAR) by the US Cybersecurity and Infrastructure Security Agency (CISA). The report shines a spotlight on dangerous exploitation chains—most notably one...

A significant security vulnerability has emerged for the Mitsubishi Electric ICONICS Product Suite and MC Works64, one that underscores the critical importance of proactive patch management and robust network segmentation across industrial environments. Marked as CVE-2025-7376, the flaw...

A wave of highly sophisticated phishing attacks has put Microsoft 365 users—and the very foundations of modern email security—at risk, exposing a perilous paradox: the same technologies designed to protect cloud productivity platforms are now being systematically exploited to facilitate...

Attackers have found a chillingly effective way to subvert defenses integrated into the heart of enterprise email security. According to new research from Cloudflare, threat actors are actively exploiting “link wrapping” services—offered by reputable vendors like Proofpoint and Intermedia—to...

The evolution of phishing campaigns in the cloud era has introduced a new breed of attacks that are increasingly hard to spot, even for seasoned security professionals. Among these, a recent campaign targeting Microsoft 365 logins stands out for its cunning use of Microsoft OAuth applications...

Here is a summary of the main points from the article on The Register regarding China's accusation against US intelligence: Chinese Claims: China has accused US intelligence agencies of exploiting a Microsoft Exchange zero-day vulnerability to steal defense-related data and control more than 50...

Threat actors are increasingly exploiting Microsoft 365’s Direct Send feature to conduct highly convincing internal phishing campaigns, eroding trust within organizations and challenging the efficacy of traditional security defenses. This emergent attack vector, recently highlighted by...

The industrial automation landscape is in a constant state of flux, with evolving threats and new vulnerabilities emerging even in the most robust control environments. Among the latest critical advisories, the recently disclosed security risks in Honeywell Experion PKS—an integrated process...

Microsoft’s annual flagship event, Ignite 2025, stands poised to make its most significant mark yet as the global tech landscape experiences the full force of an AI-driven renaissance. Set against the vibrant backdrop of San Francisco’s Moscone Center, the event promises not merely to showcase...

Microsoft has recently issued a critical security alert concerning active cyberattacks targeting on-premises SharePoint Server installations. These attacks exploit previously unknown vulnerabilities, allowing unauthorized access and posing significant risks to data integrity and system security...

Microsoft’s SharePoint platform has long been regarded as an indispensable piece of enterprise infrastructure, relied upon by thousands of government agencies, universities, and businesses worldwide to facilitate collaboration, document management, and internal communications. Yet news broke...

Microsoft has recently issued critical guidance concerning the active exploitation of vulnerabilities within on-premises SharePoint servers. These vulnerabilities, identified as CVE-2025-49704 and CVE-2025-49706, have been actively exploited, leading to unauthorized access and potential remote...

Semperis, a leader in identity security, has recently unveiled a critical vulnerability in Windows Server 2025's delegated Managed Service Accounts (dMSAs), termed the "Golden dMSA" attack. This flaw enables attackers to bypass authentication mechanisms and generate passwords for all dMSAs and...

In recent days, a significant cybersecurity incident has emerged, targeting Microsoft SharePoint servers worldwide. This attack exploits a newly identified vulnerability, CVE-2025-53770, allowing unauthorized remote code execution on on-premises SharePoint servers. The breach has affected...

In a development that has sent ripples through the enterprise IT community, Microsoft has issued urgent guidance regarding the exploitation of a newly discovered remote code execution (RCE) vulnerability in on-premise SharePoint servers, catalogued as CVE-2025-53770. The U.S. Cybersecurity and...

CrushFTP, a widely acknowledged enterprise-grade file transfer solution, has found itself thrust into the spotlight with the recent discovery of a critical zero-day vulnerability, CVE-2025-54309. The incident has sent ripples across enterprise IT environments and home user setups alike, drawing...