Microsoft SharePoint Authentication Bypass Under Active Attack
Microsoft SharePoint is the affected product in CVE-2026-55040, a critical authentication bypass vulnerability. The flaw allows unauthenticated attackers to forge JWT tokens…
Tag: Microsoft
Microsoft Visual Studio
Visual Studio is an integrated development environment (IDE) from Microsoft. It was part of the Developer Tools category with security feature bypasses.
Visual Studio Code
VS Code is a source-code editor made by Microsoft. It was part of the Developer Tools category with security feature bypasses.
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
Microsoft has issued a warning about an active phishing campaign targeting hotels and hospitality organizations across Europe and Asia since April 2026.…
GitHub to Disable npm Install Scripts by Default to Combat Supply Chain Attacks
GitHub has announced significant security changes for npm version 12, set to release next month, aimed at mitigating software supply chain attacks.…
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass exploit named GreatXML, discovered accidentally while researching…
Microsoft Edge Browser
Microsoft Edge is a browser targeted by the information stealer in the DPRK malvertising campaign. The malware harvests data from Edge among…
GPT-5.5
An upgraded large language model deployed by Microsoft as a mitigation against the prompt injection vulnerability in Copilot for Word.
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
A critical vulnerability in Microsoft 365 Copilot Enterprise Search, dubbed SearchLeak, could have allowed attackers to exfiltrate emails, files, and MFA codes…
Microsoft Bing
Microsoft's search engine, whose image processing pipeline contained critical command injection vulnerabilities allowing SYSTEM-level code execution via crafted SVGs.