SharePoint Exploit, Passwordless Cameras, and AI Ransomware via Browser
SharePoint Exploit, Passwordless Cameras, and AI Ransomware via Browser
CISA added Microsoft SharePoint Server to its Known Exploited Vulnerabilities catalogue on 1 July 2026, confirming active exploitation of CVE-2026-45659. This deserialization flaw allows authenticated attackers to run arbitrary code on vulnerable servers. UK small businesses running on-premises or hybrid SharePoint deployments must verify patch status immediately. Meanwhile, the NIST NVD revealed hardcoded credentials in JAIOTlink C492A-W6 IP cameras and unauthenticated command injection in Shenzhen Aitemi M300 Wi-Fi…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.