#microsoft

Security Roundup: SharePoint RCE Under Active Attack, Azure CLI Password Spray

CISA flags active exploitation of SharePoint CVE-2026-45659, a massive password-spray campaign hits Azure CLI, and AI coding tools face zero-click prompt injection.