Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Hackers exploit SharePoint bypass, Snowflake hacker's threats to researcher backfire, CISA warns schools

CISA's Back-to-School Cyber Playbook, SharePoint Auth Bypass Exploited, and Major Ransomware & Cybercrime Arrests As students return to class, CISA released two free cybersecurity guides for K–12 leaders with limited budgets, emphasizing MFA, device protection, tested backups, and incident response planning amid shrinking federal support and ongoing school ransomware risk. Attackers are actively exploiting a critical SharePoint authentication by…

CISA Adds Microsoft SharePoint Weak Authentication Vulnerability to KEV List

CISA added a critical Microsoft SharePoint authentication flaw to its KEV catalog after CVE-2026-55040 was confirmed in active exploitation, urging organizations to secure affected on-premises environments. CVE-2026-55040 is a weakness in Microsoft SharePoint’s authentication handling that can allow an unauthenticated attacker to bypass a security feature remotely. The issue is associated with CWE-1390, which covers weaknesses in authentication …

7 Things to Know About CVE-2026-55040 (Microsoft SharePoint)

A critical Microsoft SharePoint vulnerability is being actively exploited in the wild, less than 24 hours after a public proof-of-concept landed online. Here is what your team needs to know right now. 1. What it is: a zero-credential path straight to SharePoint admin CVE-2026-55040 is a critical authentication bypass in the JWT (JSON Web Token) […] The post 7 Things to Know About CVE-2026-55040: The SharePoint Authentication Bypass Under Active …

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting Apple macOS that could allow an

CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities

The flaws can be exploited for remote code execution, authentication bypass, and device takeover. The post CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities appeared first on SecurityWeek.