Microsoft SharePoint faces global cyber attacks exploiting a critical zero-day vulnerability in on-premises servers, affecting businesses and agencies

(Adobe Stock)

CISA warns that three SharePoint Server bugs are actively exploited

Steve ZurierJuly 15, 2026

Federal agencies given to July 17 to make the patches.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Inheriting trust: Why unified identity fabrics are becoming essential for agentic AI
Identity
Seeing the unseen: Closing AI identity blind spots

PODCASTS

Vulnerability Management
Take Back Control as Enterprises Struggle to Incorporate Risks They Don’t Understand – Ben Lipczynski – BSW #456
Vulnerability Management
Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598
Application security
Discovering & Securing Your AI Agent Attack Surface – Jeremy Snyder – ASW #391
AI/ML
Cloud Security Meets AI: What CISOs Need to Govern Before They Scale – Brent Neal – CSP #226
DevSecOps
Hungry? We talk Smoked Meat, Poutine, and Bagel – also, Identiverse Interviews! – François Proulx, John Pritchard, Cassie Christensen, Jaime Lewis-Gross, Kim Brown – ESW #467

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

MacOS ‘CrashStealer’ malware poses as crash reporter to steal credentials

Laura FrenchJuly 15, 2026

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

OAuth client ID spoofing silently validates stolen Microsoft Entra ID credentials

Steve ZurierJuly 14, 2026

Attackers run multiple spoofing campaigns to confirm credentials.

(Credit: Postmodern Studio – stock.adobe.com)

Application security

RabbitMQ fixes flaw that allowed broker takeover via OAuth secret disclosure

SC StaffJuly 14, 2026

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

Russian hack attack concept, on the computer keyboard. 3D rendering

Critical Infrastructure Security

Russia’s FSB attacks critical infrastructure, says 12 Western nations

Steve ZurierJuly 13, 2026

Russian hackers target outdated Cisco routers in decade-long espionage campaign.

Rep. Rick Larsen, D-Wash.

Critical Infrastructure Security

Rep. Rick Larsen: Bipartisan infrastructure key to safer transportation

SC StaffJuly 13, 2026

Lawmaker says bipartisan infrastructure investment is essential to modernize U.S. transportation.

(Credit: Timon – stock.adobe.com)

Incident Response

CISA shares postmortem of GitHub credential leak

Laura FrenchJuly 10, 2026

CISA credentials and code were uploaded to a public repository on a contractor’s personal GitHub account in May.

Social engineering cyber threat — growing human hacking attack concept for security awareness article, card on black keyboard

Okta warns of vishing scheme that extorts data

Steve ZurierJuly 10, 2026

Attackers pose as IT and tell employees to enroll an MS passkey, but the bad guys register their own key and take over the user.

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

Laura FrenchJuly 10, 2026

GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access.

Events