SharePoint Critical Zero-Day (CVE-2026-50522) Actively Exploited
Summary A critical deserialization vulnerability in Microsoft Office SharePoint, tracked as CVE-2026-50522 (CVSS 9.8), is under active exploitation. Threat actors chain this flaw with other SharePoint vulnerabilities to gain unauthorized…
SharePoint Critical Zero-Day (CVE-2026-50522) Actively Exploited
Summary A critical deserialization vulnerability in Microsoft Office SharePoint, tracked as CVE-2026-50522 (CVSS 9.8), is under active exploitation. Threat actors chain this flaw with other SharePoint vulnerabilities to gain unauthorized…
SharePoint Critical Zero-Day (CVE-2026-50522) Actively Exploited — Attackers Steal Machine Keys for Persistent Access
Summary A critical deserialization vulnerability in Microsoft Office SharePoint, tracked as CVE-2026-50522 (CVSS 9.8), is under active exploitation. Threat actors chain this flaw with other SharePoint vulnerabilities to gain unauthorized…
SharePoint Critical Zero-Day (CVE-2026-50522) Actively Exploited — Attackers Steal Machine Keys for Persistent Access
Summary A critical deserialization vulnerability in Microsoft Office SharePoint, tracked as CVE-2026-50522 (CVSS 9.8), is under active exploitation in the wild. Threat actors are chaining this flaw with other SharePoint…
Anthropic Limits Access to AI Model That Finds Security Flaws, Citing Hackers Misuse Risk
Summary Anthropic has restricted access to an AI model designed to identify security vulnerabilities, citing concerns that the model’s capabilities could be misused by hackers to find and exploit flaws…
Accenture Confirms Breach: 35GB of Source Code, SSH Keys, and Azure Tokens Stolen
Summary Global IT services giant Accenture has confirmed a security breach after a threat actor known as “888” offered stolen data for sale. The threat actor claims to have exfiltrated…
Pentagon Suspends CMMC Phase 2, Launches Broad Review of Defense Contractor Cybersecurity Certification
Summary On July 13, 2026, the U.S. Department of War announced the immediate suspension of Phase 2 of the Cybersecurity Maturity Model Certification (CMMC) assessment requirements, which had been scheduled…
Anthropic Suspends Claude Fable 5 Access After U.S. Government Export Control Over Jailbreak Concerns
Summary Anthropic launched Claude Fable 5, billed as its most capable publicly available model, but access was subsequently suspended following a U.S. government export control directive. The suspension was triggered…
Hugging Face Breached by Autonomous AI Agent — First Known AI-Driven Attack on ML Platform Infrastructure
Summary Hugging Face disclosed a security incident in July 2026 that marks a historic milestone in cybersecurity: the first known intrusion into production infrastructure driven entirely by an autonomous AI…
EY Breach: Attackers Spend 15 Days Inside Helpdesk Platform, Steal Client Tax Files
Summary Ernst & Young (EY) has disclosed a security breach in which threat actors compromised a third-party IT helpdesk platform used by EY’s tax practice. The attackers operated undetected for…