Microsoft SharePoint

CISA has officially identified ransomware gangs exploiting CVE-2025-60710, a high-severity Windows Task Host vulnerability. The flaw allows local attackers to escalate privileges to SYSTEM level on affected Windows systems.

Microsoft's latest Patch Tuesday includes a record 570 security fixes, highlighting a surge in vulnerabilities found via AI-assisted research. The update addresses several critical flaws and zero-days that are actively being exploited by malicious actors.

A supply chain attack targeting Klue's market intelligence platform allowed threat actors to steal Salesforce customer data through OAuth token abuse. The Icarus extortion group is identified as the primary actor behind this recent wave of CRM-focused breaches.