In conducting a 0-day research project against #SharePoint, Rapid7 Labs discovered 2 new vulns that, when chained together, achieve RCE against a vulnerable server.
Today, Rapid7 and Microsoft are disclosing CVE-2026-55040 – the first vuln in this chain: https://t.co/UkI7uCvRZN
No matter how insecure you feel,
your baby looks at you and smiles like you’re the most beautiful woman in the world.
Does your baby make you feel beautiful too? 🤍
The CAF Appeal Board decided that in application of Article 84 of the Regulations of the CAF Africa Cup of Nations (AFCON), the Senegal National Team is declared to have forfeited the Final Match of the TotalEnergies CAF Africa Cup of Nations (AFCON) Morocco 2025 (“the Match”), with the result of the Match being recorded as 3–0 in favour of the Fédération Royale Marocaine de Football (FRMF).
https://t.co/QKDI0FCKug
Hacking ~7000 DJI vacuum cleaners using AI: technical details of an MQTT broker misconfiguration. 🧹🤖🌐🕵🏻♂️🤯
More details on:
LinkedIn: https://t.co/2NKzHGAiJF
Substack: https://t.co/fRQQfLU0w1
We open-sourced DetectFlow, a detection intelligence engine that runs Sigma detections on Kafka streams via Flink. Thousands of rules, millisecond matching, before data hits the SIEM. No vendor lock-in. Works air-gapped.
Get repo here: https://t.co/LOqKximbje
#soc
@skocherhan one of the domains mentioned in the report by Unit 42 'filetransfer[.]io' found in the collection "LAPSUS$ TARGETING SHAREPOINT, VPNS AND VIRTUAL MACHINES"👉 https://t.co/xoxCNTcp1x in the centre of the graph https://t.co/McOYQsUNS9 #DEV_0537#LAPSUS$