sharepoint zero-day - Search News

Order byBest matchMost fresh

Microsoft, SharePoint and security bug

Hackers attack Microsoft SharePoint, targeting organizations like U.S nuclear security

Microsoft blamed two Chinese nation-state actors for exploiting recently discovered security flaws in SharePoint to infiltrate vulnerable organizations, like schools, state governments, and the U.S. ...

· 4d · on MSN

New zero-day bug in Microsoft SharePoint under widespread attack

PCMag on MSN · 4d

Mass Exploitation: Hackers Hit Zero-Day Flaw in Microsoft's SharePoint

· 2d

U.S. nuclear and health agencies hit in Microsoft SharePoint breach

The National Institutes of Health and the federal agency responsible for securing the nation’s nuclear weapons were among the victims in a global breach of Microsoft server software over the weekend,...

· 1d

Tally of Microsoft victims surges to 400 as hackers exploit SharePoint flaw

· 1d

Chinese Hackers Are Exploiting Flaws in Widely Used Software, Microsoft Says

· 1d

Microsoft says some SharePoint server hackers now use ransomware

The disclosure marks a potential escalation in the campaign, which has already hit at least 400 victims, according to Netherlands-based cybersecurity firm Eye Security.

· 1d

Nuclear Weapons Agency Breached in Microsoft SharePoint Hack

· 1d

The SharePoint flaw has now hit over 400 companies including a US nuclear administration

Microsoft fixes three SharePoint zero-day exploits used in series of cyberattacks - how to patch them

Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities. Here's what we know about the security flaws and how to guard against future attacks.

The Hacker News5d

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), in an alert, said it's aware of active exploitation of CVE-2025-53770, which enables unauthenticated access to SharePoint systems and arbitrary code execution over the network.

CPO Magazine9h

Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code execution on SharePoint, resulting in the exploitation of at least 54 organizations worldwide.

SecurityWeek1d

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named

More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.

The Hacker News3d

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.

Asianet Newsable on MSN2d

US Nuclear Weapons Agency Reportedly Hit In Microsoft ‘Zero-Day’ Breach — DOE Says Impact Was Minimal

Providing additional updates on the breach, Microsoft said in a blog post on Tuesday that two Chinese nation-state operators, Linen Typhoon and Violet Typhoon, exploited vulnerabilities in the internet-facing SharePoint servers.