Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code.
The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday updates.
“The authentication
Source: The Hacker News
Show HN: Neobrutalism.dev – Just added Base UI support and added new color theme Source: Hacker News
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML