Skip to content
Threat Feed
Subscribe

Tag

Dlp

4 briefs RSS
medium threat

CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows

CVE-2026-0278 describes multiple protection mechanism failures in the Prisma Access Agent's Data Loss Prevention (DLP) component for Windows, allowing a local user to bypass DLP policy enforcement controls and exfiltrate sensitive data on affected versions prior to 26.2.1.

exploited Prisma Access Agent < 26.2.1 cve vulnerability dlp bypass windows defense-evasion
1t
medium advisory

Symantec DLP Windows Endpoint Elevation of Privilege Vulnerability (CVE-2026-3991)

CVE-2026-3991 is an elevation of privilege vulnerability in Symantec Data Loss Prevention (DLP) Windows Endpoint that could allow a local attacker to gain elevated access to resources.

vulnerability privilege-escalation symantec dlp windows
2r 1t
medium advisory

Defense Evasion via Exchange DLP Policy Removal

Attackers may remove or modify Exchange Data Loss Prevention (DLP) policies in Microsoft 365 to evade detection and exfiltrate sensitive data without triggering alerts.

Microsoft 365 +1 o365 dlp defense_evasion data_exfiltration
2r 1t
medium advisory

O365 Data Loss Prevention Rule Triggered

Detection of triggered Microsoft Office 365 Data Loss Prevention (DLP) rules, which can indicate potential data exfiltration or policy violations, dependent on upstream DLP configuration.

Office 365 Data Loss Prevention data-exfiltration o365 dlp
2r 2t