CVE-2026-29205

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 20, 2026

Last Seen

May 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Microsoft Disrupts Fox Tempest Malware-Signing Service for Ransomware Gangs71.0

On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as legitimate software. The operation, active since May 2025, abused Microsoft's Artif...