A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program, giving hackers a critical head start.

Threat actors exploit SharePoint flaws to access internal systems, steal sensitive data, and carry out surveillance, ...

Chinese-linked hackers breached several U.S. government agencies, including the Department of Homeland Security and the Department of Health and Human Services, by exploiting a vulnerability in ...

Researcher Khoa Dinh originally discovered the attack chain, and earlier this month, Code White GmbH was able to reproduce ...

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

It's not just data theft. A China-based hacking group is using a flaw in vulnerable SharePoint servers to deliver ransomware, ...

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have ...

Hackers are actively exploiting a critical SharePoint zero-day (CVE-2025-53770), hitting 400+ firms and institutions like the ...

Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities, accusing one group of carrying out ransomware attacks. Here's what we know about ...

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...

Microsoft has accused Chinese state-sponsored groups of exploiting its SharePoint document management software to target ...