Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
What CVE-2026-58644 in Microsoft SharePoint Means for Security
On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2026-58644 vulnerability in Microsoft SharePoint Server ...
How ClickLock Stealer Forces macOS Users to Give Up Passwords
Researchers at Group-IB have discovered a new macOS infostealer, ClickLock Stealer, which uses a fundamentally different approach to obtaining the ...
How CVE-2026-59208 exposes n8n Enterprise token exchange
A vulnerability CVE-2026-59208 has been discovered in the n8n workflow automation platform that allows an attacker to authenticate as another ...
Three Critical SAP Vulnerabilities Patched in July 2026 Release
SAP has released the July 2026 security update bundle, which fixes three critical vulnerabilities: memory corruption in SAP NetWeaver Application ...
Emergency Zoom Updates Fix Critical Windows Account Takeover Bug
Zoom has released emergency security updates addressing critical vulnerability CVE-2026-53412 with a CVSS score of 9.8 in the Zoom Workplace ...
Five-Year Sentences for TfL Cyberattack Linked to Scattered Spider
On 16 July 2026, Woolwich Crown Court sentenced Owen Flowers (18) and Talha Jubair (20) to five and a half ...
How AI Is Accelerating Real-World Attacks on Active Directory and AWS
In early June 2025, researchers at Huntress documented an incident in which an unknown attacker used a PowerShell script, apparently ...
How Lexfo uncovered dual MFA-bypass phishing for Microsoft 365
The French company Lexfo discovered three active phishing campaigns against Microsoft 365 after taking advantage of one operator’s mistake: they ...
Inside the Forg365 phishing-as-a-service platform for Microsoft 365
Researchers from ZeroBAC have disclosed details of a new phishing-as-a-service (PhaaS) platform called Forg365, which targets Microsoft 365 accounts. Distributed ...
Critical iCagenda and Balbooa Forms RCE Flaws Actively Exploited
On July 10, 2026, CISA added two maximum‑severity vulnerabilities to the KEV catalog — CVE-2026-48939 and CVE-2026-56291 — affecting the ...
