ThreatsDay: Malicious VS Code themes, npm supply-chain attacks, AI phishing, ransomware betrayal, exposed hacker tools, and ...

A routine virtual hard disk copy triggered days of Hyper-V resynchronization, offering a lesson in why VM-aware export tools matter.

Hackers abused a Microsoft SQL Server to run commands, steal credentials and source code, and move files in a Viva Aerobus-linked attack.

An exposed attacker server containing an MSSQL-focused post-exploitation toolkit, credential-harvesting artifacts, and stolen ...

Microsoft released its largest security update in company history on September 8, 2026, closing 966 vulnerabilities across Windows, Office, Exchange Server, SQL Server, and Azure in a record-breaking ...

This article describes a critical SQL Server Failover Cluster incident caused by a default “Add all eligible storage” setting during node addition and subsequent run validate cluster tool, which led ...

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. The attack was discovered by ...

A SQL injection vulnerability that many organisations might consider a decades-old, well-understood threat has been used as the entry point for a far more sophisticated attack, after threat actors ...

Microsoft is walking away from more products this year than it did in 2025. Products that still run on millions of devices, including Windows 11 24H2, Office 2021, SQL Server 2016, and Windows Server ...

Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...