untrusted deserialization

  1. CISA Adds SharePoint CVE-2026-20963 to KEV Catalog: Active Exploitation

    CISA’s latest addition to the Known Exploited Vulnerabilities Catalog is a reminder that SharePoint remains a high-value target for attackers, especially when a flaw can be turned into code execution, privilege escalation, or post-compromise footholds. On March 18, 2026, the agency added...