Search InfoSecNexus
Search published blog posts, CVE notes, guides, and live briefings.
Security intelligence
Current analysis, verified advisories, and practical defensive guidance from the InfoSecNexus newsroom.
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
Read briefing Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.
Read briefing Microsoft Entra ID formerly known as Azure Active Directory contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network.
Read briefing Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.
Read briefing Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
Read briefing
Current cybersecurity intelligence for September 25, 2026, led by CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability and CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability. Verified source links,...
Read briefing