Latest security news

Thu, 10 Sept 2026

1. 20:36
   Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

   Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

   Dark Reading·Microsoft
2. 19:07
   Microsoft Excel KB5002914 update breaks copy and paste for some users

   Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality.

   BleepingComputer·Microsoft
3. 15:29
   Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

   The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

   Dark Reading·Microsoft, Windows
4. 14:11
   New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

   Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.

   BleepingComputer·Google, Microsoft, Windows
5. 13:32
   2026-004: Critical Vulnerability in SharePoint Exploited

   On 17 March 2026, Microsoft updated one of its January 2026 security advisories related to a remote code execution vulnerability in Microsoft SharePoint. Specifically, Microsoft raised the CVSS score and changed the FAQ section to indicate that the vulnerability could be exploited by an unauthenticated attacker. This vulnerability was added in the CISA's Known Exploited Vulnerabilities (KEV) catalogue on 18 March 2026. Additionally, three further RCE flaws affecting Microsoft SharePoint were addressed in the March 2026 release. CERT-EU strongly recommends updating SharePoint servers as soon as possible, prioritising internet-facing assets. CERT-EU also encourages IT administrators to take necessary remediation actions.

   CERT-EU·Microsoft, SharePoint
6. 13:32
   2026-007: Critical Vulnerability in Windows Netlogon

   On 12 May 2026, Microsoft published a security advisory addressing a critical vulnerability affecting Windows Server when acting as a domain controller. This vulnerability allows an unauthenticated attacker to execute arbitrary code over a network. According to The Centre for Cybersecurity Belgium (CCB), this vulnerability is currently exploited by threat actors. It is strongly recommended updating affected Windows servers as soon as possible.

   CERT-EU·Microsoft, Windows
7. 13:32
   2026-009: Critical Vulnerabilities in Microsoft SharePoint

   [UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Server instances, including CVE-2026-32201, CVE-2026-45659, CVE-2026-56164, and CVE-2026-58644. CERT-EU strongly recommends updating affected servers immediately, rotating credentials for any assets that may have been exposed to the internet, and conducting a compromise assessment.

   CriticalUsed in attacksCERT-EU·Microsoft, SharePoint
8. 11:14
   Microsoft says September updates fix mouse settings reset issues

   Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 August 2026 preview update.

   BleepingComputer·Microsoft, Windows
9. 08:08
   Microsoft fixes bug that wiped Windows desktop settings

   Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices.

   BleepingComputer·Microsoft, Windows
10. 07:09
    New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender

    The exploit provides full System privileges on Windows machines running the September 2026 patches.

    SecurityWeek·Microsoft, Windows