Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Software Supply Chain Security
AI Infrastructure Buildout
AI Agent Security
Agentic AI Security
Dependency Supply Chain Risk
Agentic coding workflows
Vulnerability Disclosure
Women's health research
Embodied AI
China Robotics Industry

How this is made

Today For You My Stack Off Radar Search

other

Business Connectivity Services / Business Data Catalog

SharePoint data-connection subsystem containing the CVE-2026-63520 sink that attackers probe after bypassing authentication.

Known aliases

BCS
Business Data Catalog

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 distinct publisher

Honeypots logged a SharePoint JWT bypass hunting for a Business Data Catalog sink

Attackers are forging tokens SharePoint accepts, then enumerating management APIs and probing Business Connectivity Services for the execution sink. BleepingComputer reports nobody has seen that last step land.

Publishers:dev.to

Reality

Evidence55
Adoption42
Hype gap+18
Incentives30

Confidence48

Business Connectivity Services / Business Data Catalog — other — Clarity Today