If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive.

The term "zero-day" attack refers to when a previously unknown vulnerability is targeted. Tens of thousands of servers are ...

Microsoft warned users that hackers used a security flaw in its server software to attack government agencies and businesses ...

Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and ...

Microsoft has issued an urgent security alert this weekend after discovering attackers exploiting a critical zero‑day ...

M icrosoft has released two emergency patches to address zero-day vulnerabilities that have been found in SharePoint RCE.

Unknown threat actors are using a weaponised version of an exploit showcased at Pwn2Own Berlin in May to target SharePoint ...

Companies and government agencies around the world use SharePoint for internal document management, data organization and ...

Microsoft also has issued a patch for a related SharePoint vulnerability — CVE-2025-53771; Microsoft says there are no signs ...

Microsoft Systems administrators everywhere, it looks like you get a Patch Monday as a side dish to the usual Patch Tuesday ...

The “ToolShell” cyberattack campaign exploiting zero-day vulnerabilities in on-premises Microsoft SharePoint Servers has so ...

Microsoft issued an alert about "active attacks" targeting its SharePoint server software, which is widely used by businesses ...