Latest Security News

Once inside a system, the malware targets cloud metadata services to extract temporary credentials.

In addition to the SharePoint zero-day, Microsoft also patched a publicly disclosed privilege-escalation flaw.

There are no other public reports so far confirming active exploitation of CVE-2020-9715, CVE-2023-36424, or CVE-2025-60710 besides CISAu2019s KEV list.