News

What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
SharePoint vulnerability with 9.8 severity rating under exploit across globe
The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...
Microsoft SharePoint zero-day breach hits 75 servers: Here’s what the company said on the attack
A critical zero-day vulnerability, CVE-2025-53770, is actively exploited in Microsoft SharePoint, impacting 75 company ...
JD Supra3d
Critical Microsoft SharePoint Vulnerability: What You Need to Know
Microsoft has just disclosed a serious vulnerability in SharePoint (CVE-2025-53770) that allows unauthenticated attackers to remotely execute code ...
Information Age5d
‘Act now’: Hackers exploit Microsoft SharePoint vulnerability
Hackers are exploiting a critical vulnerability in Microsoft SharePoint that can be used to steal sensitive data and remotely execute malicious code. SharePoint, Microsoft’s near-ubiquitous content ...
"We’re witnessing an urgent and active threat" — Microsoft SharePoint "ToolShell" vulnerability is being attacked globally
The term "zero-day" attack refers to when a previously unknown vulnerability is targeted. Tens of thousands of servers are ...
JD Supra1d
Active and Critical Security Concern for SharePoint
On July 20, 2025, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) issued urgent warnings about new, actively ...
Microsoft SharePoint Breach Sparks Urgency Around Next-Gen Cyber Defense
The initiative positions ICS at the forefront of a market expected to grow into a multi-billion-dollar opportunity, ...
Microsoft Issues Alert After Critical SharePoint Server Attacks
Microsoft warned of active zero-day attacks on SharePoint servers used by government and businesses, with FBI investigating.
CRN18d
Microsoft Patches ‘Wormable’ Critical Flaw, Discloses ‘Whopping’ Number Of Bug Fixes
The 130 CVEs (Common Vulnerabilities and Exposures) disclosed in Microsoft’s monthly release of security fixes includes a remote code execution flaw that ‘definitely’ should be prioritized for ...
ZDNet9y
Why Microsoft's vulnerability severity ratings are obsolete
In the last 12 months Microsoft has released 139 security bulletins; 55 of them have a severity rating of 'Critical' and 84 of them 'Important.' The point of these severity ratings is a noble one ...