SharePoint Flaws Used to Hack Switzerland’s Federal IT Agency

2026-08-04T20:51:36Z5158359feb655b00bd81df2c37192c20da88628960b6d8ff8b4c28f287b19a59
CVE-2026-18577CVE-2026-58048CVE-2026-66066AI-assisted attacksAPI-key-exposureActive StorageN-able N-centralRuby on RailsSharePointSonicWallauthentication-bypasscPaneldata-breachdata-leakexploitationgovernmentprivilege-escalationransomwareremote-code-executionsupply-chain-riskvulnerabilityzero-day

What happened

Security news roundup covering exploitation of SharePoint and SonicWall vulnerabilities, critical flaws in cPanel, N-able N-central, and Ruby on Rails, ransomware and data-extortion activity, government and corporate data breaches, and AI-assisted cyberattacks. The most severe items include unauthenticated remote code execution in Ruby on Rails Active Storage (CVE-2026-66066), authenticated SQL execution as root in cPanel (CVE-2026-58048), and an actively exploited N-able N-central authentication bypass (CVE-2026-18577).

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
5158359feb655b00bd81df2c37192c20da88628960b6d8ff8b4c28f287b19a59
Enrichment time
2026-08-04T20:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.