If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive.

Microsoft also has issued a patch for a related SharePoint vulnerability — CVE-2025-53771; Microsoft says there are no signs ...

Microsoft, in an alert posted Saturday, July 19, said the vulnerability enables an “authorized attacker to perform spoofing ...

Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and ...

Patches have been issued for two versions of Microsoft’s SharePoint software, while one version remains vulnerable.

Microsoft has issued an urgent security alert this weekend after discovering attackers exploiting a critical zero‑day ...

Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers ...

Microsoft is dealing with a high-stakes security mess. A zero-day vulnerability in its on-premises SharePoint servers is under active attack, and close to 100 organizations are already affected. This ...

Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively ...

The patches fix the security holes in more recent versions of SharePoint, but the 2016 version is still at risk.

Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organizations and recommended security updates that ...