AI Summary

Hackers are actively exploiting the critical CVE‑2026‑50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. An attacker who obtains these keys can create valid authentication tokens that impersonate users. With the forged identity, the attacker can access SharePoint sites and documents using the privileges of the impersonated user. The flaw allows continued access to resources even after patching the servers.

AI summaries can be wrong sometimes—always verify important details using the source article.