News

Microsoft fixes SharePoint zero-day exploits used in cyberattacks and ransomware - how to patch them

Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities. Here's what we know about the security flaws and how to guard against future ...

What to know about a vulnerability being exploited on Microsoft SharePoint servers

Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have ...

Microsoft SharePoint servers are under attack because of a major security flaw

Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers ...
GovInfoSecurity8d

Attackers Exploit Zero-Day Flaws in On-Premises SharePoint

Hackers have been exploiting two zero-day vulnerabilities in on-premises installations of Microsoft SharePoint to gain remote ...

SharePoint vulnerability with 9.8 severity rating under exploit across globe

The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively ...
CSO Online8d

Microsoft SharePoint zero-day breach hits on-prem servers

CISA has mandated immediate mitigation for federal agencies, while analysts urge enterprises to accelerate cloud migration ...
Barchart on MSN20h

Spooked By the Microsoft SharePoint Exploit? Here’s the Top-Rated Cybersecurity Stock to Buy for Portfolio Protection.

Almost a year to the day after a global Windows outage that rocked companies from Delta Air Lines (DAL) to local hospitals, ...
The Register on MSN7d

Microsoft patches critical SharePoint 2016 zero-days amid active exploits

Admins urged to rotate machine keys, restart IIS after emergency fix Microsoft has good news for administrators running ...
CPO Magazine4d

Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...
Government Technology6d

As SharePoint Exploit Emerged, State Cyber Teams Mobilized

State CISOs in North Carolina and Arizona said their teams began work immediately to ensure on-prem SharePoint systems were ...
The Hacker News7d

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.