Microsoft confirms Outlook zero-day used to steal NTLMv2 hashes
Patched November 10, CVE-2026-124194 leaks hashes only after a user opens a crafted file; Preview Pane is not a vector.
Stories per day · 30 days
2 RSS
Relatedasus1credential-theft1cve-2026-701111data-exposure1denial-of-service1dfs1dual-bios1expertbook1file-share1firmware1integer-overflow1kernel1ksmbd1linux1microsoft1microsoft-office1misconfiguration1ntlm1
21 stories, newest first · one card per story
Stories tagged #smb
Wireshark SMB object export overflow allows remote code execution
ZDI rates the integer overflow 8.8 and says user interaction is required; no CVE is listed.
Pen tester says tobacco firm left recipes on an open file share
The share allowed anonymous SMB access to every employee; the company denied the recipes were real, then the files disappeared.
SMBs need vendor guidance for cybersecurity
Trusted vendors must provide clear guidance to SMB customers to help them navigate complex cybersecurity solutions and respond to incidents.
1
ASUS pitches dual BIOS on ExpertBook A7 for SMB firmware recovery
A second firmware chip can boot the laptop if the primary BIOS fails checks or an update is interrupted.
Two unfixed Linux KSMBD flaws allow remote code execution, CVSS 9.0
One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.
Microsoft Windows Server 0-Day Flaw Lets Attackers Crash Servers With a Single Packet
Microsoft patched CVE-2026-70111, a Windows Server DFS flaw that can crash servers with one malicious SMB response.
4
Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later
A construction firm that declined security help was hit by ransomware, lost its only backup, and went bust; second anecdote details AiTM Microsoft 365 phishing.
2
SMB1001: How Huntress Maps to Each Tier
Huntress maps its managed security stack to SMB1001:2026, a five-tier certification built for small businesses.
The quest for simplicity: Why SMBs want advanced protection without the complexity
ESET argues SMBs want advanced, simple cybersecurity and managed detection rather than more complex point tools.
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit commit 1b458c3 updates the auxiliary SMB scanner for CVE-2000-0979.
Meta Names Dhruv Vohra to Lead Southeast Asia Business
Meta named Dhruv Vohra managing director of its Southeast Asia global business group.
Airties adds router-level cybersecurity protection for ISPs
Airties added router-based threat detection so ISPs can protect every device in homes and small businesses.
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
ESET warns SMB AI agents face malicious skills and prompt injection while classic attacks still dominate breaches.
3
Cyberthreats are moving faster than SMBs: Readiness must accelerate
ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.
1
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Apple's record patch cycle fixes 260+ CVEs across iOS 27 and macOS 27, including CUPS remote code execution, with no active exploitation reported.
ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability
ZDI discloses CVE-2026-64397, a CVSS 9.0 unauthenticated remote code execution race condition in Linux Kernel KSMBD.
ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution Vulnerability
ZDI-26-693: authenticated race condition in Linux kernel ksmbd share configuration allows remote code execution on ksmbd-enabled systems; CVSS 8.5.
Best Practices for Good Endpoint Hardening | Huntress
Huntress outlines endpoint hardening best practices, citing exposed RDP, RMM tool abuse, and ClickFix social engineering as common SMB intrusion paths.
1
Veeam Released Patches for Critical Vulnerability (CVE-2026-65641)
Veeam patched critical CVE-2026-65641 (CVSS 9.3) in Veeam ONE, exploitable by unauthenticated network attackers to coerce SMB authentication from the service account.
Three smart ways SMBs can improve cybersecurity
Opinion piece urges small and midsize businesses to adopt proactive prevention, threat detection, and 24/7 MDR or XDR services.
1