SharePoint Exploit, Passwordless Cameras, and AI Ransomware via Browser

CISA added Microsoft SharePoint Server to its Known Exploited Vulnerabilities catalogue on 1 July 2026, confirming active exploitation of CVE-2026-45659. This deserialization flaw allows authenticated attackers to run arbitrary code on vulnerable servers. UK small businesses running on-premises or hybrid SharePoint deployments must verify patch status immediately. Meanwhile, the NIST NVD revealed hardcoded credentials in JAIOTlink C492A-W6 IP cameras and unauthenticated command injection in Shenzhen Aitemi M300 Wi-Fi repeaters, exposing cheap networked devices as unlocked entry points. Finally, researchers demonstrated AI-generated ransomware that exploits the Chromium File System Access API to encrypt files through browser permissions users have already granted. Google released Chrome 150, patching 382 vulnerabilities including 15 critical flaws. This episode explains why browser patching, device inventories, and permission audits are now procurement-level requirements, not IT housekeeping. Corrine delivers actionable guidance: demand specific CVE remediation timelines from your MSP, catalogue every networked device, revoke unnecessary browser permissions, and review cyber insurance coverage for browser-based attack vectors.

Chapters

• Intro Corrine introduces the three critical threats facing UK small businesses today: active SharePoint exploitation confirmed by CISA, passwordless IP cameras on business networks, and AI-generated ransomware abusing browser permissions.
• SharePoint Is Being Actively Exploited CVE-2026-45659, a deserialization flaw in Microsoft SharePoint Server, allows authenticated attackers to execute arbitrary code. CISA’s KEV listing confirms real-world exploitation. On-premises and hybrid SharePoint deployments require immediate patch verification, not general IT enquiries.
• CTA Corrine invites listeners to follow, rate, review, and share the show with small business owners who need practical security intelligence.
• Your Office Camera May Have No Password CVE-2026-58453 exposes hardcoded credentials in JAIOTlink C492A-W6 cameras, allowing unauthenticated access to live feeds and command injection. CVE-2026-58457 affects Aitemi M300 repeaters with root-level command injection. Cheap commodity devices become staging points for lateral movement.
• AI-Generated Ransomware Is Using Your Browser Against You Researchers identified AI-generated malware exploiting the Chromium File System Access API to encrypt files via browser permissions. Google Chrome 150 patches 382 vulnerabilities. Browser patching and permission audits are now critical attack surface controls.
• Why This Matters for Your Competitive Position Timely patching, device inventories, and permission controls are becoming procurement requirements. Demonstrable security controls differentiate suppliers in contracts with clients who enforce supply chain security standards.
• Outro Corrine recaps the three action points: verify SharePoint patch status for CVE-2026-45659, inventory and secure networked devices, and apply Chrome 150 while auditing file system permissions. Cyber insurance policies may not cover browser-based ransomware delivery.

Links

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2026-45659
• https://nvd.nist.gov/vuln/detail/CVE-2026-58453
• https://nvd.nist.gov/vuln/detail/CVE-2026-58457
• https://www.ncsc.gov.uk/collection/vulnerability-management