30
55
30
30
42
55
30
30
55
55
30
55
47
30
Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modules
60
Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
60
30
30
30
55
55
55
30
Microsoft Exchange Vulnerability CVE-2026-62911: What Administrators Should Do and How Zscaler Can Help
High-severity authentication bypass CVE-2026-62911 in Exchange Server has public exploit code; about 22,000 servers remain unpatched and internet-exposed.
Microsoft's August 2026 Patch Tuesday fixed CVE-2026-62911 (CVSS 8.0), an authentication bypass affecting Exchange Server 2016, 2019 and Subscription Edition. Successful exploitation lets an attacker with basic privileges take over all mailboxes on the targeted server, including reading and sending email and downloading attachments. As of September 1, Shadowserver identified roughly 22,000 unpatched, internet-exposed Exchange servers, including about 6,200 in the US and 5,100 in Germany. NCSC-NL confirmed working exploit code is publicly available, while CISA has not yet reported exploitation in the wild.
78
30
30
55
30
30
60
30
Microsoft issues emergency patches for SharePoint zero
60
60
Microsoft Patch Tuesday, February 2025 Edition
60
60
55
30
60
55
47