If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive.

Microsoft, in an alert posted Saturday, July 19, said the vulnerability enables an “authorized attacker to perform spoofing ...

Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and ...

Patches have been issued for two versions of Microsoft’s SharePoint software, while one version remains vulnerable.

Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively ...

Researchers say Chinese actors, along with other criminal hackers, exploited a security flaw in SharePoint software widely ...

The patches fix the security holes in more recent versions of SharePoint, but the 2016 version is still at risk.

Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers used by global businesses and agencies at risk. Microsoft issued an alert on ...

Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" ...

Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organizations and recommended security updates that ...

Microsoft has issued an urgent security alert this weekend after discovering attackers exploiting a critical zero‑day ...