Search: “Microsoft Internet Key Exchange Service Extensions”

106 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 32 Vulnerability 21 Malware 19 Exploit / PoC 10 Threat actor 10 Data breach 5 Phishing & fraud 3 Policy & legal 3 Industry 2 Advisory 1

SeverityAll critical 55 high 38 medium 7 low 6 info 0

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

CISA adds actively exploited flaws in Microsoft IKE, SharePoint, VMware vCenter, and macOS Screen Sharing to KEV catalog, due August 21.

CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-33824 (Windows IKE remote code execution, CVSS 9.8), CVE-2026-55040 (SharePoint JWT authentication bypass, CVSS 9.1), CVE-2026-59310 (VMware vCenter Syslog path traversal, CVSS 9.8), and CVE-2026-65400 (macOS Screen Sharing improper authentication). The SharePoint flaw combines four weaknesses including alg:none JWT forging to impersonate any user, with Defused researchers observing attackers using Rapid7's PoC against honeypots. The Dutch NCSC confirmed active exploitation of the macOS Screen Sharing flaw on August 15, 2026. Federal agencies must patch by August 21, 2026.

Security AffairsAug 19, 07:19 UTC · 28d agoExploit / PoC in the wildCVE-2026-33824 CVE-2026-55040 CVE-2026-59310+1 CVEs

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded FutureSep 8, 00:00 UTC · 8d agoVulnerability in the wildCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+4 CVEs

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.

CISA added CVE-2026-65400 (macOS Screen Sharing, CVSS 9.8), CVE-2026-55040 (SharePoint, CVSS 9.1), CVE-2026-59310 (VMware vCenter, CVSS 9.8) and CVE-2026-33824 (Microsoft IKE Service Extensions, CVSS 9.8) to the KEV catalog. The macOS flaw was abused to deliver a Monero miner, while the vCenter bug was exploited by a suspected China-nexus APT to install reverse_ssh backdoors and Babuk-derived ransomware across 361 victim IPs in 47 countries. Unit 42 linked CVE-2026-33824 to a Chinese-speaking actor running an AI-enabled campaign using DeepSeek. FCEB agencies must patch by August 21, 2026 under BOD 26-04.

The Hacker NewsAug 19, 15:26 UTC · 27d agoExploit / PoC in the wildCVE-2026-65400 CVE-2026-55040 CVE-2026-59310+1 CVEs

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero

Security AffairsApr 15, 05:18 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-32201 CVE-2026-33825 CVE-2026-33827+1 CVEs

Equinix acquires MainOne to accelerate digital transformation throughout the African continent

Help Net SecurityApr 6, 00:00 UTC · Apr 6, 2022Industry

Threat Roundup for January 28 to February 4

Cisco TalosFeb 4, 20:02 UTC · Feb 4, 2022Ransomware

Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with Babuk

Cisco TalosNov 3, 12:00 UTC · Nov 3, 2021Ransomware CVE-2021-36942

Microsoft September 2022 Patch Tuesday fixed actively exploited zero

Security AffairsSep 14, 19:59 UTC · Sep 14, 2022Vulnerability in the wildCVE-2022-37969 CVE-2022-23960 CVE-2022-34700+4 CVEs

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

The Hacker NewsApr 4, 12:06 UTC · Apr 4, 2025Policy & legal

IT threat evolution Q3 2020

Kaspersky SecurelistNov 20, 10:00 UTC · Nov 20, 2020Ransomware CVE-2020-0986 CVE-2020-1380

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.