New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.

Eating its prey can be a process for a python, which is why it relies so heavily on its jaw to get the job done, including consuming a whole deer.

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Microsoft MSFT0.19%increase; up pointing triangle, Google and Amazon AMZN-0.69%decrease; down pointing triangle are among the tech companies spending an estimated $1 trillion on AI infrastructure this ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability.

In other news, a DHS database was hacked, Adobe is releasing patches twice a month, and Canada has disrupted ransomware operations.

A recently identified but accidentally unpublicised remote code execution (RCE) flaw in Microsoft SharePoint, tracked as CVE-2026-45659, has been added to the US Cybersecurity and Infrastructure ...