Cyber Attacks
Microsoft Dismantles YAM Store Phishing Marketplace and CoGUI Tools
Microsoft and partners took down a cybercrime hub that sold phishing templates and stolen accounts, disrupting a network that sent over a billion messages.
Microsoft
Everything NetSec Observer has reported about Microsoft: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft SQL Server 2019-2025 Deserialization Bug Allows Auth Users Remote Code Execution
Microsoft SQL Server versions through 2025 contain a high-severity deserialization flaw that lets authorized users run remote code.
Vulnerabilities
ASP.NET Core SignalR Resource Exhaustion Flaw CVE-2026-70159 Patches Available for .NET 8 to 11
Microsoft patches a high-severity resource exhaustion flaw in SignalR that allows unauthenticated attackers to block broadcasts and deny service.
Vulnerabilities
Windows iSCSI Use-After-Free CVE-2026-69883: Critical 9.8 RCE Vulnerability
A critical remote code execution vulnerability in the Windows iSCSI service allows unauthorized network attackers to execute arbitrary code without prior access.
Vulnerabilities
Critical Heap Overflow in MS PostScript Driver Enables Remote Code Execution via Network
A critical heap-based buffer overflow in the Microsoft PostScript Printer Driver allows unauthorized attackers to run code over a network.
Vulnerabilities
Azure API Center Sensitive Info Exposure Vulnerability CVE-2026-83943 Scored 8.7 CVSS
Microsoft rates CVE-2026-83943 as high severity with an 8.7 CVSS score, warning that unauthorized actors can disclose sensitive information over a network.