Cyber ​​Security Hub

STAC4749 impersonated IT support staff through Microsoft Teams to gain remote access and deploy Chaos ransomware in less than 17 hours. Here's what organizations need to know.

A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.

Microsoft confirmed that Defender for Endpoint on Linux may become disabled after an update and reboot. Organizations should verify affected systems and upgrade immediately.

Recently, Microsoft marked a significant milestone by releasing an unprecedented number of security patches for familiar products like Windows and Office.

Microsoft patched 622 flaws in July 2026, including two actively exploited zero-days affecting SharePoint and AD FS. Organizations should update now.

Microsoft Teams is being abused to impersonate IT support and deliver EtherRAT malware. Learn how the attack works and how businesses can respond.

SharePoint vulnerability CVE-2026-45659 has been added to CISA's KEV catalog after active exploitation. Learn about the RCE risk, ransomware threats, and how IPSIP helps secure your systems.

The Microsoft SharePoint storage and collaboration platform is a widely used system across many organizations and enterprises. However, a high-severity security vulnerability has recently been discovered and is being actively exploited by threat actors in the wild.

Researchers at Zscaler ThreatLabz have discovered an Edgecution malware campaign that spreads through Microsoft Teams and a malicious Microsoft Edge browser extension. The malware uses a two-component architecture and abuses Chrome Native Messaging to escape the browser sandbox, allowing attackers to execute commands, run PowerShell scripts, and gain direct access to victims' systems.

Windows users face a major security alert as Microsoft confirms a critical unpatched zero-day flaw in its default antivirus, Microsoft Defender. This vulnerability clears the path for attackers to easily seize the highest level of system privileges.

Microsoft has officially released critical patches to address a series of severe security vulnerabilities in Outlook and Word.

Recently, researchers discovered a critical vulnerability dubbed "FlagLeft" within the Microsoft 365 application ecosystem for the Android operating system. This issue threatens the information security of billions of users globally, paving the way for malicious applications to silently hijack account access without requiring any user interaction or permission.

The widely used security application, Microsoft Defender, has recently logged two highly critical "zero-day" vulnerabilities. Microsoft has swiftly rolled out emergency fixes.

Microsoft officially open-sourced two new security tools named RAMPART and Clarity. This is the tech giant's effort to help developers control risks from AI agents during the software development process, rather than only testing at the final step before deployment.

Driven by recent crackdowns on pirated software-a hot topic lately-many users are searching for legal, cost-effective alternatives to Microsoft Office. Fortunately, there are several free office suites available today that are more than capable of handling common tasks such as viewing and editing DOCX, XLSX, and PPTX files. These tools perfectly serve daily workflows, studying, and basic office administrative tasks.

With 97% of SMEs acting as weak security links, explore the seminar overview and 3 practical cybersecurity solutions for small businesses to optimize costs.

Discover how Double Key Encryption (Duokey) empowers organizations with 100% control over digital assets on Office 365 and AWS seamlessly and securely.

Cybercriminals are exploiting Azure Monitor Alerts to spoof invoices and system failures. Discover the list of malicious Alert Rules and expert prevention strategies from IPSIP.

In the technology landscape, operating system updates are typically expected to enhance stability and security. However, Microsoft's March 2026 cumulative update is currently delivering the opposite result.

CISA warns of CVE-2026-20963, a highly dangerous Remote Code Execution (RCE) flaw in Microsoft SharePoint. Update immediately with security solutions from IPSIP experts.