SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak
SharePoint Zero-Auth Bypass, macOS Screen Sharing Flaw, Copilot Data Leak
Three critical vulnerabilities confirmed as actively exploited demand immediate attention from UK small businesses. CVE-2026-55040 allows unauthenticated attackers to bypass SharePoint authentication entirely, no credentials required. CVE-2026-65400 lets attackers on your local network gain full control of unpatched Macs through Screen Sharing without valid credentials. CVE-2026-24301, now patched, demonstrated how a single crafted link could silently exfiltrate data from Microsoft Copilot Personal. Corrine walks…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.