enterprise-security

3 articles · newest first

A Microsoft office building — CVE-2026-55040 affects on-premises SharePoint Server, not SharePoint Online

a researcher posted SharePoint exploit code on Tuesday. attackers were forging admin access by Thursday

Microsoft patched this JWT flaw back in July. A public proof-of-concept turned it into real attacks in under 48 hours — here's exactly what's broken and how to check if you're exposed.

Priya Nair · 1d ago · 6 min

Rows of enterprise server racks in a data center, representative of VMware vCenter-managed infrastructure

Software

hackers broke into 361 companies' VMware servers in under a week — and they're not leaving

A 9.8-severity bug in vCenter's syslog server went from patch to active exploitation in five days, and attackers are planting permanent backdoors, not just stealing data.

Priya Nair · Aug 14 · 6 min

Check Point SmartConsole security management interface on a monitor

Software

Check Point sells firewalls for a living. hackers got admin on it before there was a patch

A broken identity check let attackers skip the login screen entirely — and Check Point found out because someone was already inside.

Priya Nair · Aug 1 · 6 min