News

ZAWYA22m
Kaspersky reveals SharePoint ToolShell vulnerabilities stem from incomplete 2020 fix
Kaspersky GReAT researchers analyzed the published ToolShell exploit and found it alarmingly similar to the 2020 ...
Microsoft7d
Disrupting active exploitation of on-premises SharePoint vulnerabilities
Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting vulnerabilities ...
Microsoft grapples with another security breach: The latest on the SharePoint attacks
Microsoft confirms Chinese hackers exploited a SharePoint flaw; Patches now available. Cloud-based Microsoft 365 not affected ...
What to know about a vulnerability being exploited on Microsoft SharePoint servers
Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have ...
CPO Magazine2d
Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain
Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...
Microsoft SharePoint attack now sees victim count rises to 400 organizations, including US nuclear agency
New estimates regarding the recently-exploited Microsoft SharePoint vulnerabilities now evaluate that as many as 400 ...
Microsoft Sharepoint server vulnerability puts an estimated 10,000 organizations at risk
A major security vulnerability in Microsoft's widely used Sharepoint server software has been exploited by hackers, causing ...
A Microsoft SharePoint 0-Day Security Vulnerability Was Just Weaponized At Scale
Microsoft Systems administrators everywhere, it looks like you get a Patch Monday as a side dish to the usual Patch Tuesday ...
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech ...
JD Supra3d
SharePoint Server Vulnerabilities Exploited Despite Emergency Patch
Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...
Microsoft says Chinese hacking groups exploited SharePoint vulnerability in attacks
Two Chinese nation-state actors and one China-based threat actor have tried to exploit the vulnerability for weeks, Microsoft ...
Microsoft Blames ‘China-Based Threat Actor’ for SharePoint Attacks
A series of cyberattacks targeting Microsoft collaboration software, specifically SharePoint, have been linked to Chinese hackers and threat actors.