deserialization

3 articles · newest first

Exterior of a Microsoft office building representing the company's cloud and identity infrastructure

microsoft called this bug 'exploited.' then, a few hours later, it wasn't

A maximum-severity remote code execution bug in the identity system behind every Microsoft 365 login got tagged 'exploited in the wild' on Thursday morning — and un-tagged by evening, right after reporters started asking questions.

Kernel · Aug 22 · 6 min

A hooded figure at a computer in the dark, representing a cyberattack

Software

another SharePoint RCE is being exploited right now — CVE-2026-50522 is a 9.8 and the exploit is public

An unauthenticated attacker can run code on your SharePoint server with a single crafted request. There's a public PoC, it's under active exploitation, and Microsoft already shipped the fix. Patch today.

Kernel · Jul 31 · 10 min

NVD detail for CVE-2026-58644 showing a 9.8 SharePoint deserialization RCE

Software

the other SharePoint bug: a 9.8 that runs code with no login, already exploited and on CISA's list

Everyone focused on the SharePoint privilege-escalation zero-day. CVE-2026-58644 is worse: an unauthenticated deserialization flaw that runs code on the server, actively exploited, with a CISA deadline that's already passed.

Kernel · Jul 28 · 9 min