📅 Thursday, May 28, 2026
LinkedIn Twitter / X Contact

🛡️ Modern Workplace Security News

Cyber Threats · Vulnerabilities · Breaches · Advisories — Updated Regularly
TRENDING
⚠️
ACTIVE ADVISORY — Windows CLFS Zero-Day Under Active Exploitation
A critical privilege escalation flaw (CVE-2026-26030, CVSS 9.8) in the Windows Common Log File System driver is being actively weaponised by ransomware groups. Apply the May 2026 Patch Tuesday update immediately. No workaround exists.
📅 May 28, 2026 · Source: Microsoft MSRC · Read full advisory →

📰 Latest News

View All →
🐛
Vulnerability May 28, 2026
Windows CLFS Zero-Day CVE-2026-26030 Actively Exploited — CVSS 9.8
Critical EoP flaw in Windows CLFS driver being weaponised by RansomHub. Patch Tuesday fix available — deploy immediately via WSUS or Windows Update.
By MWS Editorial
Read more →
🎣
Phishing May 27, 2026
Storm-1575 Bypasses MFA with Large-Scale AiTM M365 Phishing Campaign
Threat actor using Evilginx2 to harvest M365 session cookies post-MFA. Standard MFA is not sufficient — switch to FIDO2 / Windows Hello for Business.
By MWS Editorial
Read more →
💻
Vulnerability May 26, 2026
SharePoint Server RCE CVE-2026-29064 — Unauthenticated PoC Published
Public proof-of-concept exploit now available for the unauthenticated RCE flaw in on-premise SharePoint Server. Apply the May cumulative update or isolate immediately.
By MWS Editorial
Read more →
🌐
Threat Intel May 25, 2026
Azure Service Principal Tokens Exposed via Misconfigured GitHub Actions Pipelines
Hundreds of repos accidentally leaking Azure credentials. Audit your workflows, rotate secrets, and migrate to OIDC federated identity immediately.
By MWS Editorial
Read more →

🔎 More Stories

🔒
Ransomware Apr 2026 · FBI / CISA
Akira Ransomware Joint Advisory — FBI and CISA Warn SMBs to Patch VPN and Disable RDP
FBI/CISA joint advisory AA26-098A details Akira TTPs targeting SMBs. Key mitigations: patch Cisco ASA / Fortinet immediately, enforce MFA on all remote access, test offline backups.
📱
Threat Intel Apr 2026 · CERT-IN
MDM Enrolment Phishing Pushing Malicious Intune Configuration Profiles onto BYOD Devices
Attackers sending fake IT helpdesk emails to trick users into enrolling in attacker-controlled MDM. Malicious VPN config profiles then intercept all network traffic. Restrict Intune enrolment to approved devices and enforce MFA on the portal.
📧
Phishing Mar 2026 · NCSC UK
QR Code Phishing (Quishing) Surge Bypasses Traditional Email Security Gateways
Malicious links embedded in QR code images evade URL scanners. Targets redirected to fake M365 login pages. Configure Defender for Office 365 Safe Links to scan QR codes and train users to be suspicious of QR codes in emails.
🖨️
Vulnerability Mar 2026 · Microsoft MSRC
Windows Print Spooler EoP CVE-2026-21348 — Disable on Servers Not Requiring Print
Local privilege escalation flaw in Windows Print Spooler frequently chained with other exploits for post-compromise SYSTEM access. Apply March 2026 cumulative update or disable the service on servers where printing is not required.
🏭
Cyber Attack Feb 2026 · NCSC UK
Russian APT29 Targets UK and India SMB Supply Chains via Trusted Software Vendors
APT29 (Cozy Bear) compromising software vendors to push trojanised updates to downstream customers. Review third-party software update sources, implement application allow-listing, and monitor for anomalous outbound connections.
🗄️
Data Breach Jan 2026 · ICO
UK SMB Data Breach Fines Surge 40% in 2025 — ICO Annual Report
ICO annual report shows a 40% increase in fines issued to SMBs for data breaches caused by inadequate access controls and unpatched systems. Ensure Conditional Access, MFA and regular patch cycles are in place to reduce exposure.
🔍 No stories in this category yet — check back soon.
🔥 Trending This Week
01
02
03
04
05
📊 Threat Level Summary
Critical
2
High
4
Medium
3
Low
1
⚡ Immediate Actions
🔗 Microsoft MSRC Advisories 🔗 CISA KEV Catalog 🔗 NCSC UK Advisories 🔗 CERT-IN Alerts 🔗 NIST NVD Database

Is Your SMB Protected?

Get a free security audit tailored to these current threats — no jargon, just clear advice.

Book Free Audit