nvd.nist.gov

nvd.nist.gov • July 21, 2026

Share: View original

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exposed Malware Delivery Lab Reveals AI-Driven Phishing Operations An exposed server functioning as a malware delivery lab was discovered following an MDR alert. The lab contained over 1,000 artifacts, showcasing how attackers are leveraging generative AI for rapid lure generation and automated testing. The investigation revealed the attackers' workflow, including the testing of delivery paths and social engineering tactics. Notably, the server was used to host bulk-generated shortcut lures and various payloads. This incident highlights the need for proactive security measures to manage exposure and enhance detection capabilities. The attack vector involved WebDAV execution methods, with telemetry indicating a user executed a file using rundll32.exe. The findings provide insights into the evolving tactics of cybercriminals, emphasizing the importance of understanding their operational methodologies. 2 sources 68

Extracted Entities

Domains (1)

Platforms (1)

Mshtml Framework