#exchange


n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

Jul 16, 2026 // 16:37

n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it […]

Microsoft patches Exchange Server zero-day exploited in attacks

Jun 10, 2026 // 16:56

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook […]

Hackers Spied on a Stock Exchange Executive’s Outlook Mailbox for Five Months

Jun 4, 2026 // 14:26

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out […]

The U.S. sanctions Nobitex crypto exchange used by ransomware

Jun 4, 2026 // 00:36

The U.S. Treasury’s Office of Foreign Assets Control (OFAC) has announced sanctions against Nobitex, Iran’s largest cryptocurrency exchange, for facilitating payments related to terrorist activities. […]

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

May 18, 2026 // 18:10

Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A […]

Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own

May 15, 2026 // 23:57

​During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows […]

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

May 15, 2026 // 13:15

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The […]

Microsoft warns of Exchange zero-day flaw exploited in attacks

May 15, 2026 // 12:56

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting […]

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

May 15, 2026 // 12:21

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The […]

Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

May 13, 2026 // 16:05

A threat actor with affiliations to China has been linked to a “multi-wave intrusion” targeting an unnamed Azerbaijani oil and gas company between late December […]