A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program, giving hackers a critical head start.

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

Hackers are actively exploiting a critical SharePoint zero-day (CVE-2025-53770), hitting 400+ firms and institutions like the ...

Multiple hacking groups—including state actors from China—have targeted a vulnerability in older, on-premises versions of the ...

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...

A series of cyber intrusions targeting Microsoft’s SharePoint platform has triggered alarm across global businesses and ...

The company uncovers evidence that at least three China-based hacking groups are abusing the zero-day flaw in SharePoint ...

Microsoft confirms two known China-nexus threat actors, and one other suspected state-backed hacking group, are exploiting ...

Exploitation of the ToolShell RCE zero-day in Microsoft SharePoint continues to gather pace, with evidence emerging of ...