ARTIKEL SUCHE
Threat Feed QueryDurchsuche alle aggregierten Security-Artikel nach Schlagworten, CVE-IDs und Quellen.
CVE-2026-47298 - Microsoft SharePoint Server Remote Code Execution Vulnerability
…ago Description :Improper authorization in Microsoft Office SharePoint allows an authorized attacker…
CVE-2026-45644 - Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability
…generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an…
New Phishing Attack Abuses Outlook and Microsoft 365 Groups Features to Attack Users
…A newly identified campaign shows how threat actors are turning everyday Microsoft…
CVE-2026-58596 - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
…Description :Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized…
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python…
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365…
Microsoft Teams Vishing Attack Uses Quick Assist to Deploy GoGRPC Backdoor
A new Microsoft Teams vishing campaign is using fake IT support calls…
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
…another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target…
Malware Abuses Windows Hello for Business Key to Authenticate Microsoft Entra ID
…cryptographic keys to authenticate to Microsoft Entra ID, enabling attackers to gain…
CVE-2026-70326 - Microsoft SharePoint Server Elevation of Privilege Vulnerability
…side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker…
CVE-2026-66808 - Microsoft SharePoint Server Remote Code Execution Vulnerability
…Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker…
CVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability
…Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker…
EvilTokens Doesn’t Just Steal Microsoft Sessions—Its AI Tells Attackers Who to Scam Next
…The service steals Microsoft 365 session access, then examines the compromised mailbox…
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
…The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by…
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
…as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated…
CVE-2026-83948 - Microsoft Azure CLI Remote Code Execution Vulnerability
…a command ('command injection') in Microsoft Azure CLI allows an authorized attacker…
CVE-2026-81952 - Microsoft Word Remote Code Execution Vulnerability
…Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker…
CVE-2026-81385 - Microsoft Office Publisher Remote Code Execution Vulnerability
…Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker…
NightEagle Hackers Abuse Microsoft Dev Tunnels and GhostContainer to Breach Russian Companies
…around stolen VPN credentials, a Microsoft Exchange backdoor, and covert remote-access…
Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords
Hackers are abusing Microsoft Teams chats to impersonate IT help desk staff…