SharePoint Under Active Attack, AI Ransomware, and FortiBleed

The Daily CVE Update · Jul 3, 2026 · 11m

SharePoint Under Active Attack, AI Ransomware, and FortiBleed

CISA has confirmed active exploitation of CVE-2026-45659, a remote code execution vulnerability in Microsoft SharePoint Server. UK small businesses running on-premises SharePoint need to verify patch status immediately, not when convenient. This episode examines the gap between Microsoft’s May patch release and delayed security bulletin, explains why basic site members can exploit this flaw to gain server control, and clarifies the distinction between cloud-hosted and on-premises risk. We also cover JADEPUFFER, the first documented…