sharepoint zero - Search News

Order byBest matchMost fresh

Microsoft, SharePoint

Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code execution on SharePoint, resulting in the exploitation of at least 54 organizations worldwide.

· 2d

Microsoft fixes three SharePoint zero-day exploits used in series of cyberattacks - how to patch them

CSO Online · 1d

Microsoft’s incomplete SharePoint patch led to global exploits by China-linked hackers

· 1d

Chinese Hackers Are Exploiting Flaws in Widely Used Software, Microsoft Says

Microsoft said another actor, which it called Storm-2603, was also involved in the hacking campaign.

· 1d

Microsoft says some SharePoint hackers now using ransomware

· 1d

Microsoft says it can’t fix flaw in some SharePoint servers

Hackers attack Microsoft SharePoint, targeting organizations like U.S nuclear security

Microsoft blamed two Chinese nation-state actors for exploiting recently discovered security flaws in SharePoint to infiltrate vulnerable organizations, like schools, state governments, and the U.S. government’s top nuclear security agency.

4don MSN

New zero-day bug in Microsoft SharePoint under widespread attack

Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and must assume they have already been compromised.

Krebs on Security4d

Microsoft Fix Targets Attacks on SharePoint Zero-Day

Microsoft also has issued a patch for a related SharePoint vulnerability — CVE-2025-53771; Microsoft says there are no signs of active attacks on CVE-2025-53771, and that the patch is to provide more robust protections than the update for CVE-2025-49706.

Nextgov2d

DHS impacted in hack of Microsoft SharePoint products, people familiar say

The zero-day vulnerability — which was first disclosed late Saturday — has been exploited by several Chinese state-aligned groups, according to Microsoft.

Government Technology1d

States Monitor SharePoint Threat, Offer Best Practices

Officials in Indiana and Missouri said technologists remain watchful, but their states so far seem to have avoided compromise. The latter’s Office of Administration credited a layered security approach for helping deflect bad actors.