Microsoft News Articles
Recent news articles refferecing the vendors vulnerabilities.
Help Net SecurityCVE-2026-68820Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) - Help Net Security
Microsoft's August 2026 Patch Tuesday delivered 400+ security fixes, including one for an actively exploited zero-day flaw (CVE-2026-68820).
22 hours ago
The Hacker NewsCVE-2026-55040Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Attackers exploit SharePoint CVE-2026-55040 after a Rapid7 PoC release, forging JWTs to impersonate site users or admins.
1 day ago
Arabian PostCVE-2026-68820Lazarus exploits Windows zero-day in defence attacks
Lazarus exploits Windows zero-day in defence attacks : Latest in - Arabian Post
1 day ago
OnmsftCVE-2026-68820Microsoft Patches Actively Exploited Windows WinSock Vulnerability
Microsoft patches CVE-2026-68820, an actively exploited Windows WinSock flaw that can give local attackers SYSTEM privileges.
1 day ago
The Hacker NewsCVE-2026-68820Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Lazarus-linked attacks exploit Windows CVE-2026-68820 as a zero-day to gain SYSTEM access and deploy Troy against defense and aerospace firms.
2 days ago
Lazarus hackers exploited Windows zero-day to target defense firms
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.
2 days ago
WebpronewsCVE-2026-68820Microsoft's August 2026 Patches Close 421 Holes as North Korean Hackers Turn Kernel Driver Into Zero-Day Weapon
Microsoft's August 2026 Patch Tuesday fixed 421 CVEs, including the actively exploited CVE-2026-68820 in afd.sys. North Korea's Lazarus group used the zero-day in Operation Dream Job to deploy a kernel rootkit and gain SYSTEM privileges. Organizations must prioritize this update before attacks escal...
2 days ago
Hackers leverage new Microsoft SharePoint exploit in attacks
Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.
2 days ago
ForbesCVE-2026-68820Microsoft Windows 0-Day Attack Deploys Lazarus Rootkit—Patch Now
Microsoft has released a patch for a Windows use-after-free zero-day vulnerability already being exploited to deploy malware used by the Lazarus hacking group.
2 days ago
It Security NewsCVE-2026-68820Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) - IT Security News
2026-08-12 12:08 Microsoft’s August 2026 Patch Tuesday delivered security fixes for 400+ vulnerabilities, including one that has been exploited in zero-day attacks (CVE-2026-68820) and three...
2 days ago
It Security NewsCVE-2026-50656ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch - IT Security News
2026-08-12 11:08 Chaotic Eclipse released a PoC for ShieldBreak, a Microsoft Defender zero-day that bypasses the CVE-2026-50656 patch and could enable SYSTEM-level code execution. Security...
2 days ago
The Hacker NewsCVE-2026-50656ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
ShieldBreak is a claimed patch bypass for Defender flaw CVE-2026-50656, with a PoC tested on Windows 11 25H2 and Server 2025.
2 days ago
CxotodayCVE-2026-68820State Sponsored Hackers Use Fake Job Offers to Deliver New Zero Day Exploit
It typically begins the same way it has for years, with an approach from a recruiter offering a role at a company the target would recognize, accompanied by a PDF describing the position in convincing detail. That approach remains one of the most effective entry points used by state sponsored threat...
2 days ago
CybersecuritynewsCVE-2026-63520Microsoft SharePoint Server Vulnerability Allows Attackers to Inject and Execute Malicious Code Remotely
A critical remote code execution flaw in Microsoft SharePoint Server that, when chained with a previously reported authentication bypass, lets an attacker take over a vulnerable server without ever needing valid credentials.
2 days ago
News9liveCVE-2026-68820North Korea linked Lazarus hackers use fake job offers to target defence firms in India
North Korea-linked Lazarus hackers have revived their Operation Dream Job campaign with fake recruiter messages, malicious PDFs and a newly discovered Windows vulnerability. The attacks have targeted defence, aerospace and aviation organisations, including victims in India.
2 days ago
It Security NewsCVE-2026-70329Microsoft Outlook Vulnerability Allows Attackers to Execute Malicious Code Remotely - IT Security News
2026-08-12 06:08 Microsoft has disclosed a new remote code execution flaw in Outlook, tracked as CVE-2026-70329, as part of its August 2026 Patch Tuesday rollout. The vulnerability stems from...
2 days ago
CybersecuritynewsCVE-2026-70329Microsoft Outlook Vulnerability Allows Attackers to Execute Malicious Code Remotely
Microsoft has disclosed a new remote code execution flaw in Outlook, tracked as CVE-2026-70329, as part of its August 2026 Patch Tuesday rollout.
2 days ago
Cyber Risk LeadersCVE-2026-63520Rapid7 and Microsoft disclose SharePoint RCE flaw CVE-2026-63520
Rapid7 Labs says it has identified two new vulnerabilities in Microsoft SharePoint that can be chained to achieve unauthenticated remote code execution (RCE) on a vulnerable server.
2 days ago
SharePoint Vulnerability Exploited Shortly After PoC Release
SharePoint vulnerability CVE-2026-55040 is now being exploited in the wild, with the attacks starting shortly after the release of a PoC
2 days ago
SwapupdateMicrosoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack - SwapUpdate
Swati KhandelwalAug 11, 2026Vulnerability / Windows Security
2 days ago
Microsoft's Patch Tuesday Deluge Continues With August Updates
Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.
2 days ago