Blog Archive

Older posts, still searchable. ← Back to recent posts

Filtering by tag: #windows-security Showing 8 posts
Cybersecurity New

Microsoft Exchange Server Zero-Day CVE-2026-42897 Is Being Actively Exploited — Here's What Small Businesses Need to Do Right Now

Microsoft has confirmed active exploitation of a new Exchange Server zero-day (CVE-2026-42897) that lets attackers run malicious JavaScript just by getting a user to open a crafted email in Outlook Web Access. No permanent patch exists yet — but mitigations are available now. Here's a step-by-step guide for small businesses.