News

SecurityWeek2h
Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch
Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell ...
Microsoft links Sharepoint ToolShell attacks to Chinese hackers
Hackers with ties to the Chinese government have been linked to a recent wave of widespread attacks targeting a Microsoft ...
Patch SharePoint Now: Microsoft Servers at Risk of New ToolShell RCE Attack
If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive.
Attacks on Microsoft Sharepoint: What admins need to do after patching
Closing the gaps is not enough against the current toolshell attacks. After all, attackers could already be inside. We show ...
US nuclear agency hit in Microsoft SharePoint hack, company points finger at Chinese hackers
A widespread cyberattack, attributed to Chinese state-sponsored hackers, compromised over 100 organizations globally, ...
SecurityWeek19h
Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers
Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
A security patch Microsoft released this month failed to fully fix a critical flaw in the U.S. tech giant's SharePoint server software, opening the door to a sweeping global cyber espionage effort, a ...
Microsoft knew of SharePoint server exploit but failed to effectively patch it
A security patch released by Microsoft last month failed to fully fix a critical flaw in U.S. tech giant's SharePoint server ...
Stocktwits on MSN14h
Microsoft Gains 19% Since May, But Retail Sentiment Tells A Different Story: Here’s The Latest On China-Backed Cyberattacks
Microsoft Corp. (MSFT) shares have displayed an interesting pattern on Stocktwits–the stock has gained over 19% in value ...
CRN1d
Five Things To Know On Microsoft SharePoint Server ‘ToolShell’ Attacks
An ongoing cyberattack campaign known as “ToolShell” is exploiting on-premises Microsoft SharePoint Servers and has ...
CRN1d
Microsoft Releases Final Patch For SharePoint Server Against ‘ToolShell’ Attacks
Microsoft released a patch Monday for SharePoint Server 2016 that protects customers against a pair of vulnerabilities, which ...
"We’re witnessing an urgent and active threat" — Microsoft SharePoint "ToolShell" vulnerability is being attacked globally
The term "zero-day" attack refers to when a previously unknown vulnerability is targeted. Tens of thousands of servers are ...