TT-CSIRT-454.17.04.26: Microsoft SharePoint Server Zero-Day Spoofing Vulnerability (CVE-2026-32201)
Severity: Medium (Elevated due to active exploitation) Overview:A zero-day vulnerability in Microsoft SharePoint Server allows attackers to perform spoofing attacks due to improper input validation. The vulnerability is actively being exploited…
Read MoreTT-CSIRT Collaborates in Cyber Subject Matter Expert Exchange (SMEE) 2026
The Trinidad and Tobago Cyber Security Incident Response Team (TT-CSIRT), under the Ministry of Homeland Security (MHS), collaborated in the Cyber Subject Matter Expert Exchange (SMEE) 2026. The engagement brought…
Read MoreMHS and TATT Sign MOU to Strengthen National Cybersecurity Collaboration
The Ministry of Homeland Security (MHS), through the Trinidad and Tobago Cyber Security Incident Response Team (TT-CSIRT), signed a Memorandum of Understanding (MOU) with the Telecommunications Authority of Trinidad and…
Read MoreTT-CSIRT – 453.24.09.25 – Shai-Hulud Self-Replicating Worm Supply Chain Compromise
Please be advised, CISA has issued a critical alert regarding a widespread supply chain attack involving npmjs.com, the largest JavaScript package registry. A self-replicating worm named “Shai-Hulud” has compromised over…
Read MoreTT-CSIRT – 452.23.09.25 – Security Alert: New Inboxfuscation Tool That Bypasses Microsoft Exchange Inbox Rules and Evades Detection
Please be aware, newly discovered is a sophisticated new attack framework called Inboxfuscation, developed by Permiso Security to demonstrate critical vulnerabilities in Microsoft Exchange inbox rule detection systems. This Unicode-based…
Read MoreTT-CSIRT – 451.13.09.25 – Malware Alert: Azure Function Abuse
Please be advised there has been a discovery of a highly evasive attack using a malicious ISO image named Servicenow-BNM-Verify.iso, containing four files, with two openly visible and two hidden.…
Read More