Order byBest matchMost fresh

Microsoft contains SharePoint security wildfire

Digest more
A Failed Microsoft Security Patch Is the Latest Win for Chinese Hackers
Last year, the Department of Homeland Security released a scathing report detailing Microsoft’s mistakes during a 2023 hack in which China stole thousands of emails from top government officials. Two years before that, China-linked cyberattackers compromised more than 250,000 Microsoft Exchange servers.

Continue reading

MyNorthwest · 18h
Hackers attack Microsoft SharePoint, targeting organizations like U.S nuclear security
Microsoft contains SharePoint security wildfire, but questions linger about on-premises software
Tally of Microsoft victims surges to 400 as hackers exploit SharePoint flaw
The number of companies and organizations compromised by a security vulnerability in Microsoft Corp.’s SharePoint servers is increasing rapidly, with the tally of victims soaring more than sixfold in ...

Continue reading

Microsoft says China-based hackers exploiting critical SharePoint vulnerabilities to deploy Warlock ransomware — three China-affiliated threat actors seen taking advantage
Microsoft fixes SharePoint zero-day exploits used in cyberattacks and ransomware - how to patch them
Microsoft probing if Chinese hackers learned SharePoint flaws through alert, Bloomberg News reports
A security patch Microsoft released this month failed to fully fix a critical flaw in the U.S. tech giant's SharePoint server software, opening the door to a sweeping global cyber espionage effort.

Continue reading

The SharePoint flaw has now hit over 400 companies including a US nuclear administration
CSOonline · 1d
Microsoft’s incomplete SharePoint patch led to global exploits by China-linked hackers
Microsoft probing if Chinese hackers learned SharePoint flaws through alert, Bloomberg News reports
Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched, Bloomberg News reported on Friday.
CPO Magazine16h
Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain
Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code execution on SharePoint, resulting in the exploitation of at least 54 organizations worldwide.
Microsoft Used China-Based Support for Multiple U.S. Agencies, Potentially Exposing Sensitive Data
Microsoft says it will no longer use China-based engineers to support the Pentagon. But ProPublica found that the tech giant has relied on its global workforce for years to support other federal clients,
Microsoft grapples with another security breach: The latest on the SharePoint attacks
Microsoft confirms Chinese hackers exploited a SharePoint flaw; Patches now available. Cloud-based Microsoft 365 not affected.
Explore more
Hackers use Microsoft security flaw to commit global assault
An investigation is underway after hackers used a security flaw in Microsoft software to internationally infiltrate agencies and businesses over the weekend.
Microsoft SharePoint attack now sees victim count rises to 400 organizations, including US nuclear agency
New estimates regarding the recently-exploited Microsoft SharePoint vulnerabilities now evaluate that as many as 400 organizations may have been targeted.
National security experts raise concerns after Microsoft program exposed as possible avenue for Chinese spying
National security experts expressed alarm over Microsoft's practices allowing China-based engineers access to Pentagon cloud systems after a ProPublica investigation.
Microsoft11d
Improving IT efficiency with Microsoft Security Copilot in Microsoft Intune and Microsoft Entra
Announcing the general availability of Microsoft Security Copilot capabilities for IT with Microsoft Intune and Microsoft Entra, offering AI-powered efficiency and enhanced security for your operations.
Windows 10 users can now sign up for free extended security updates
To get free security updates for Windows 10 for an extra year after the October end-of-life deadline, Microsoft says you need to update your device by installing the latest Windows updates. The new wizard should then appear, which not only warns you about the end of support for Windows 10 but also displays the options for ESU updates.
Feedback