News

Microsoft14m
Disrupting active exploitation of on-premises SharePoint vulnerabilities
Microsoft has observed two named Chinese nation-state actors, Linen Typhoon and Violet Typhoon, exploiting vulnerabilities ...
Microsoft Warns Of Active Exploits Targeting SharePoint Vulnerabilities
Microsoft warns of active attacks by Chinese hackers exploiting SharePoint flaws CVE-2025-49706 and CVE-2025-49704, urging urgent patching and mitigation steps.
What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
GovInfoSecurity9h
US Nuclear Agency Breach Tied to SharePoint Zero-Days
The U.S. government agency that maintains and designs America's nuclear weapons was reportedly breached by attackers ...
US nuclear weapons agency reportedly hacked in SharePoint attacks
Unknown threat actors have reportedly breached the National Nuclear Security Administration's (NNSA) network in attacks ...
US agency overseeing nuclear weapons breached in Microsoft SharePoint attack
Microsoft SharePoint zero-day flaws were exploited to breach over 50 organizations, including the National Nuclear Security ...
Business Times12h
Microsoft Says Chinese Hackers Breached SharePoint Servers in Widespread Cyberattack
Microsoft is facing mounting scrutiny after Chinese state-linked hacking groups exploited a critical flaw in its SharePoint ...
The Hacker News12h
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
CISA flags Microsoft SharePoint flaws under active attack by Chinese hackers. U.S. agencies must patch by July 23 ...
Microsoft fixes three SharePoint zero-day exploits used in series of cyberattacks - how to patch them
Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities. Here's ...
Homeland Security Today17h
Microsoft Releases Updated Guidance on Exploitation of SharePoint Vulnerabilities
This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...
The Hacker News19h
Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access
Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech ...