More than 29,000 Microsoft Exchange servers exposed to the internet are still vulnerable to a high-severity security flaw ...

A critical zero-day vulnerability in WinRAR, CVE-2025-8088, is being actively exploited by Russian hacking groups to execute ...

The industry’s biggest annual get together offers CISOs insights into security researcher’s latest findings. From cloud ...

At Black Hat USA 2025, Dirk-jan Mollema showed how low-privilege cloud accounts can be turned into hybrid admins, bypassing ...

“This is a serious vulnerability in Exchange and security teams should give it immediate attention,” Thomas Richards, infrastructure security practice director at application security software ...

Microsoft is being sued by a man who feels cheated by the current plans to sunset Windows 10. He makes some good points, but I doubt he'll win.

Threat actors continue to exploit ToolShell to gain unauthorized access to on-premises SharePoint servers. On August 6, 2025, the Cybersecurity ...

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...

Plus, RomCom isn't the only Russia-linked crew to abuse WinRAR holes. Fancy Bear, the GRU cyber-espionage crew, previously exploited CVE-2023-38831 for large-scale phishing campaigns against ...

Microsoft's open source NLWeb framework for delivering AI-driven agentic web applications shipped with an easy to exploit ...