News

What to know about ToolShell, the SharePoint threat under mass exploitation

The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
Microsoft5d

Disrupting active exploitation of on-premises SharePoint vulnerabilities

Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting vulnerabilities ...
CPO Magazine1d

Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...

SharePoint vulnerability with 9.8 severity rating under exploit across globe

The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...

Microsoft SharePoint attack: Officials issue warning about 'active exploitation'

Federal cybersecurity officials have issued a warning to Microsoft users about a security flaw allowing hackers to access to ...
Federal News Network4d

Agencies face tight deadline to mitigate SharePoint vulnerability

CISA gave agencies until the end of the day on Monday to mitigate a severe zero-day vulnerability in Microsoft's widely used ...
Homeland Security Today3d

Microsoft Releases Updated Guidance on Exploitation of SharePoint Vulnerabilities

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...
Government Technology3d

As SharePoint Exploit Emerged, State Cyber Teams Mobilized

State CISOs in North Carolina and Arizona said their teams began work immediately to ensure on-prem SharePoint systems were ...
The Hacker News4d

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.

Microsoft SharePoint under 'active exploitation,' Homeland Security's CISA says

Eye Security, a cybersecurity firm, says it "identified active large-scale exploitation" of the new vulnerability "being used ...
PCMag on MSN5d

Mass Exploitation: Hackers Hit Zero-Day Flaw in Microsoft's SharePoint

The newly discovered flaw in Microsoft's SharePoint software has allowed hackers to target dozens of companies and organizations. Only a partial fix has been issued.
Redmondmag.com5d

SharePoint Zero Day Vulnerability Exploited in Government System Breaches

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert Sunday detailing active exploitation of a ...