News

Patch SharePoint Now: Microsoft Servers at Risk of New ToolShell RCE Attack
If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive.
Microsoft SharePoint attack: Officials issue warning about 'active exploitation'
Microsoft, in an alert posted Saturday, July 19, said the vulnerability enables an “authorized attacker to perform spoofing ...
New zero-day bug in Microsoft SharePoint under widespread attack
Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and ...
Microsoft hit with SharePoint attack affecting global businesses and governments
Patches have been issued for two versions of Microsoft’s SharePoint software, while one version remains vulnerable.
Krebs on Security10h
Microsoft Fix Targets Attacks on SharePoint Zero-Day
Microsoft also has issued a patch for a related SharePoint vulnerability — CVE-2025-53771; Microsoft says there are no signs ...
What to know about a vulnerability being exploited on Microsoft SharePoint servers
Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have ...
Microsoft SharePoint zero-day exploited in RCE attacks, no patch available
Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively ...
China-backed hackers used Microsoft flaw in attacks, defenders say
Researchers say Chinese actors, along with other criminal hackers, exploited a security flaw in SharePoint software widely ...
Microsoft fixes two SharePoint zero-days under attack, but it's not over - how to patch
The patches fix the security holes in more recent versions of SharePoint, but the 2016 version is still at risk.
Microsoft SharePoint servers are under attack because of a major security flaw
Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers used by global businesses and agencies at risk. Microsoft issued an alert on ...
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" ...