Malware & Threats
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
Hi, what are you looking for?
SecurityWeek
All posts tagged "SharePoint"
Vulnerabilities
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.
Vulnerabilities
The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Vulnerabilities
CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659).
Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Vulnerabilities
The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.
Government
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
Malware & Threats
Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell zero-days.
Malware & Threats
More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities.
Vulnerabilities
Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.
Threat Intelligence
Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately.
Vulnerabilities
CISA has added a recent Microsoft SharePoint Server remote code execution vulnerability to the KEV catalog.
Vulnerabilities
CISA says a second SharePoint vulnerability demonstrated last year at Pwn2Own, CVE-2023-24955, has been exploited in the wild.
Malware & Threats
CISA has added a critical Microsoft SharePoint Server flaw (CVE-2023-29357) to its Known Exploited Vulnerabilities catalog.
Artificial Intelligence
At least three threat actors have been abusing Cairn for persistent access and financial theft.
Malware & Threats
Malware & Threats
ICS/OT
The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training.
Supply Chain Security
Artificial Intelligence
