SharePoint Server CVE-2026-45659 Added to CISA KEV
CISA has added Microsoft SharePoint Server CVE-2026-45659 to KEV after evidence of exploitation. On-prem SharePoint admins should verify fixed builds and triage exposed servers...
Author profile
Emma Davis
Content editor and security writer focused on making malware-removal and scam-prevention guides easier to understand. Emma reviews structure, clarity, and source consistency before articles are published.
1,078 articles
Editorial review
Reader clarity
Security guidance
Published work
Recent articles by Emma Davis
News · July 1, 2026
Azure CLI Password Spray Hits Microsoft 365 Accounts in 81M Attempts
A large Azure CLI password spray campaign used old passwords and ROPC flows to compromise Microsoft 365 accounts despite weak Conditional Access coverage.
News · July 1, 2026
Oracle E-Business Suite CVE-2026-46817 Exploited in Payments Attacks
Oracle E-Business Suite CVE-2026-46817 exploitation has begun against Oracle Payments. Admins should patch May 2026 CSPU and review exposed EBS web interfaces.
News · June 30, 2026
Kemp LoadMaster CVE-2026-8037: Patch Pre-Auth Root RCE
Progress Kemp LoadMaster CVE-2026-8037 can let an unauthenticated attacker run root commands through API command endpoints. Patch to GA 7.2.63.2 or LTSF 7.2.54.18 and...
News · June 30, 2026
SimpleHelp CVE-2026-48558: Patch Exploited OIDC Bypass
CISA added SimpleHelp CVE-2026-48558 to KEV after active exploitation. Admins should patch 5.5.15 and older or 6.0 prerelease builds and review RMM access.
News · June 29, 2026
StegoAd Edge Extensions: Microsoft Removed 119 Malicious Add-ons
Microsoft removed 119 StegoAd Edge extensions that hid payloads in images and fonts. Users should audit extension IDs, remove matches, and rotate exposed credentials.
News · June 29, 2026
pedit COW CVE-2026-46331: Patch Linux Kernel Root Flaw
CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local-root flaw in traffic control. Patch and reboot shared Linux systems first.
News · June 28, 2026
KDDI Email Breach May Expose 14.2M ISP Passwords
KDDI says a third-party software flaw exposed email addresses and passwords for up to 14.22 million accounts across six Japanese ISP services.
News · June 28, 2026
Amazon Q Developer CVE-2026-12957: Patch MCP RCE Flaw
Amazon Q Developer users should update Language Servers for AWS after high-severity CVEs exposed malicious-workspace code execution and file-write risks.
News · June 27, 2026
Signal Recovery Key Phishing: FBI Warns Russian Hackers
FBI and CISA warn Russian intelligence-linked hackers now phish Signal Backup Recovery Keys. Check linked devices, rotate exposed keys, and never share recovery codes.
News · June 26, 2026
DirtyClone CVE-2026-43503: Patch Linux Kernel Root Flaw
DirtyClone, tracked as CVE-2026-43503, is a Linux kernel local privilege escalation flaw tied to the DirtyFrag family. Administrators should verify whether their distribution kernel...
News · June 25, 2026
PTC Windchill CVE-2026-12569: Patch Exploited RCE Now
CISA added PTC Windchill and FlexPLM CVE-2026-12569 to KEV after active exploitation evidence. Check exposure, patch by June 28, and review PLM integrations.
