Critical Sharepoint security vulnerability: First patches are available
Microsoft has now released a patch, but attackers were not idle over the weekend. Dozens of SharePoint installations fell victim of "ToolShell"
Kritische Sharepoint-Sicherheitslücke: Erste Patches für "ToolShell" sind da
Microsoft hat mittlerweile einen Patch veröffentlicht, Angreifer waren am Wochenende jedoch nicht untätig. Dutzende Sharepoint-Installationen wurden Opfer.
Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) https://www.helpnetsecurity.com/2025/07/20/microsoft-sharepoint-servers-under-attack-via-zero-day-vulnerability-with-no-patch-cve-2025-53770/ #PaloAltoNetworks #EyeSecurity #SharePoint #Don'tmiss #CodeWhite #Microsoft #Hotstuff #exploit #0-day #News #CISA
SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available https://www.securityweek.com/sharepoint-under-attack-microsoft-warns-of-zero-day-exploited-in-the-wild-no-patch-available/ #ThreatIntelligence #Vulnerabilities #vulnerability #CVE202553770 #SharePoint #Microsoft #Featured #exploit
SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available https://www.securityweek.com/sharepoint-under-attack-microsoft-warns-of-zero-day-exploited-in-the-wild-no-patch-available/ #ThreatIntelligence #Vulnerabilities #vulnerability #CVE202553770 #SharePoint #Microsoft #Featured #exploit
Microsoft: Angriffe auf neue Sharepoint-Lücke – bislang kein Patch verfügbar
Microsoft warnt vor aktiven Angriffen auf eine bislang unbekannte Lücke in Sharepoint-Servern und benennt Erste-Hilfe-Maßnahmen für Verteidiger.
Ah yes, another "riveting" deep dive into exploiting #coprocessors, because who doesn't want to spend their weekends mapping DRAM for kicks? 
The writer proudly updates their #kernel #exploit to support more outdated devices, as if anyone was clamoring for "Trigon: The Sequel". 
https://alfiecg.uk/2025/07/16/Trigon.html #deepdive #outdateddevices #techhumor #DRAMmapping #HackerNews #ngated
‘ #Israel may redraw maps, #exploit minorities, strike #capitals & #starve children, but it cannot bomb its way into permanence. It cannot silence a region forever. It cannot build its future atop the ruins of others because those ruins remember.’
https://www.middleeasteye.net/opinion/damascus-gaza-israels-doctrine-hegemony-fatal-flaw
I wrote my first #HardenedBSD #exploit today and I feel proud! #exherbo #sydbox #security https://git.hardenedbsd.org/hardenedbsd/HardenedBSD/-/issues/107#note_41813
Update now! Chrome security vulnerability is being exploited
Google updated its Chrome web browser on Wednesday night. The update also closes a vulnerability that had already been exploited.
Jetzt aktualisieren! Chrome-Sicherheitslücke wird angegriffen
Google hat in der Nacht zum Mittwoch den Chrome-Webbrowser aktualisiert. Das Update schließt auch eine bereits attackierte Lücke.
#Today one of my colleagues put my attention on this article, and to be honest I do love the reporting style. Meme's and writing like this?
"The ‘good news’, I suspect, is that most orgs will be too lacking in logs to have evidence."
"China go brrr"
At least it's not dry 
https://doublepulsar.com/citrixbleed-2-situation-update-everybody-already-got-owned-503c6d06da9f
WinRAR Zero-Day Exploit Allegedly on Sale for $80,000 https://dailydarkweb.net/winrar-zero-day-exploit-allegedly-on-sale-for-80000/ #Vulnerability #CyberSecurity #vulnerability #exploit #ZeroDay #WinRAR #RCE
Exploit available: Patch FortiWeb vulnerability now!
On Thursday, Fortinet released an update for FortiWeb. Exploits have emerged that abuse the critical gap.
Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) https://www.helpnetsecurity.com/2025/07/14/exploits-for-unauthenticated-fortiweb-rce-are-public-so-patch-quickly-cve-2025-25257/ #webapplicationsecurity #vulnerability #Don'tmiss #WatchTowr #Hotstuff #Fortinet #exploit #Rapid7 #News #PoC
Exploit verfügbar: FortiWeb-Sicherheitslücke jetzt patchen!
Am Donnerstag hat Fortinet ein Update für FortiWeb veröffentlicht. Exploits sind aufgetaucht, die die kritische Lücke missbrauchen.
Critical #CitrixBleed 2 #vulnerability has been under active #exploit for weeks
A critical vulnerability allowing #hackers to bypass #multifactor #authentication in network management devices made by #Citrix has been actively #exploited for more than a month, researchers said. The finding is at odds with advisories from the vendor saying there is no evidence of in-the-wild #exploitation.
#security #privacy
Just published a proof-of-concept exploit for CVE-2025-32463, a new Linux privilege escalation vulnerability affecting sudo discovered and disclosed by Stratascale about 2 weeks ago.
The PoC is available on GitHub. A full technical writeup will be published on my blog soon.
GitHub: https://github.com/morgenm/sudo-chroot-CVE-2025-32463
