The Cybersecurity and Infrastructure Security Agency (CISA) has added a 9.8-rated vulnerability affecting Microsoft SharePoint servers to its list of Known Exploited Vulnerabilities (KEV). The vulnerability, CVE-2023-29357, could allow attackers to bypass authentication checks and gain administrative access to a server. Despite a patch being issued by Microsoft in June, CISA reports it is still being actively exploited.

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens – securityaffairs.com
Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens securityaffairs.com
.webp?w=0&resize=0,0&ssl=1)
.webp?w=0&resize=0,0&ssl=1)
.webp?w=0&resize=0,0&ssl=1)