News

SharePoint vulnerability with 9.8 severity rating under exploit across globe
The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...
Microsoft fixes three SharePoint zero-day exploits used in cyberattacks and ransomware - how to patch them
Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities, accusing one group of carrying out ransomware attacks. Here's what we know about ...
The Register on MSN1d
Blame a leak for Microsoft SharePoint attacks, researcher insists
MAPP program to blame? A week after Microsoft told the world that its July software updates didn't fully fix a couple of bugs ...
What to know about a vulnerability being exploited on Microsoft SharePoint servers
Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have ...
What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech ...
Microsoft confirms Chinese cyber groups behind major SharePoint exploit; US agencies and global companies among affected
Three China-linked cyber espionage groups have launched a significant hacking campaign affecting various organisations, ...
The Hacker News5d
Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access
Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.
The Hacker News3d
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Storm-2603 exploits SharePoint flaws to deploy Warlock ransomware, affecting 400+ victims. Microsoft urges mitigation.
CPO Magazine2d
Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain
Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...
The SharePoint flaw has now hit over 400 companies including a US nuclear administration
The SharePoint vulnerabilities that Microsoft released emergency patches for earlier this week – tracked as CVE-2025-53770 ...
Microsoft looking at ‘internal leak’ after Chinese hackers exploit SharePoint flaw
Microsoft is investigating a potential leak within its MAPP program, suspecting that Chinese state-backed hackers exploited ...