Cybersecurity News — Top-Secured

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Outlook: an exploited flaw leaks users’ NTLMv2 hashes, Microsoft patches it

Microsoft’s November 2026 updates fix CVE-2026-124194, an Outlook flaw that the vendor says is already exploited. A crafted file opened in Outlook makes it connect to an attacker’…

MicrosoftOutlookMicrosoft 365

Threat High

Fake IT support on Teams, then domain certificates: Microsoft details two intrusions through AD CS

Microsoft has investigated two intrusions that began with attackers posing as IT support on Teams and went on to abuse Active Directory Certificate Services. In one case, certific…

WindowsMicrosoft 365

ConnectWise · Microsoft 365 — 7 × Entra ID

Incident High

ConnectWise Cloud Backup: attackers hijacked the service’s Microsoft 365 identities, MSPs must audit every customer tenant

ConnectWise has confirmed unauthorised access to the application identities of its Cloud Backup service, formerly SkyKick, which connect to the Microsoft 365 tenants of managed se…

Microsoft 365Supply chainCloud

Vulnerability High

Windows Shell: a zero-day that strips the internet warning from files, fixed in October’s Patch Tuesday

Among the more than 1,400 flaws fixed by Microsoft on 13 October, CVE-2026-96951 (CVSS 8.8) is already exploited: it lets a booby-trapped file escape the Mark of the Web protectio…

Windows

Threat High

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Articles Breaches & leaks

Chrome, Edge, Safari Successfully Hacked At Tianfu Cup Competition In Chi

Chinese security researchersÂwere able to successfully discover zero-day vulnerabilities in Chrome, Edge, Safari, Office 365,Âqemu-kvm + Ubuntu and more at a r…

Linux Microsoft 365 Chrome

Back to Home