This article breaks down CVE-2026-32201, a zero-day spoofing vulnerability in Microsoft SharePoint Server. You’ll learn how the flaw works, why “spoofing” is more dangerous than it sounds, and what your team needs to do right now if on-premises SharePoint is part of your environment.
This report provides a detailed analysis of OAuth token abuse, focusing on how threat actors bypass defensive security measures to gain unauthorised access.
This Expert Intel summarises the key cyber security themes from CYBERUK 2026, exploring how AI is accelerating attacker capability, why identity remains the primary control gap, and what UK based organisations should prioritise to strengthen detection, response, and supply chain resilience.
Microsoft is reshaping its licensing strategy with the introduction of Microsoft 365 E7, new pricing changes, continued Teams separation, and additional security and AI functionality being bundled into existing licences. For organisations investing in AI, automation, security, and compliance, these changes could significantly affect licensing costs, procurement decisions, and long-term Microsoft 365 strategy.
This report provides an in‑depth analysis of the Tycoon2FA phishing‑as‑a‑service platform, including how it bypasses MFA and harvests credentials through session authentication cookies. In addition, the report outlines recommended mitigation strategies to help prevent and detect this phishing technique.
In this intel we set out to understand the changing landscape of trust, in a digital world where AI-generated code is permeating the software supply chain at scale and AI-enabled phishing is making adversarial infrastructure harder than ever to distinguish from the real thing.
How the 2026 Cyber Essentials updates tighten requirements around secure configuration, 14-day vulnerability remediation, continuous scanning, enforced MFA, and scope transparency — and what operational changes UK SMEs must implement to remain compliant and resilient.
Notepad++ recently disclosed a compromise of its shared hosting infrastructure that affected its update endpoint. Threat actors altered update endpoints within configuration files to deliver a malicious version of the software to specific targets. This resulted in downstream users – potentially including businesses – downloading what appeared to be a legitimate update, but which gave attackers a foothold on compromised devices and therefore internal networks.
Most of us are familiar with Microsoft’s rapid release cycle, with new features landing almost weekly. And as we move into 2026 that’s not slowing down, Microsoft 365 continues to strengthen the security baseline for businesses - click through to learn more.
Sign up for the latest news
