CVE-2026-55040

• Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

  Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Securit

• Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

  Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done thr

• Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

  Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network sock

• CISA Urges SharePoint Hardening After New Exploitations

  CISA Urges SharePoint Hardening After New Exploitations CISA is aware of active exploitation of vulnerabilities CVE-2026-32201 , CVE-2026-45659 , and CVE-2026-56164 , enabling cyber threat actors to gain unauthorized access to on-premises SharePoint Server instances. These vulne

• Microsoft smashes Patch Tuesday record for second successive month

  Microsoft smashes Patch Tuesday record for second successive month Vulnerability counts have been surging this year, and Microsoft's mammoth disclosure this week of 622 bugs is larger than the three previous months combined. Microsoft smashes Patch Tuesday record for second suc

• Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

  Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive l

All reports →