A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program, giving hackers a critical head start.

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have ...

The zero-day vulnerability — which was first disclosed late Saturday — has been exploited by several Chinese state-aligned ...

Threat actors exploit SharePoint flaws to access internal systems, steal sensitive data, and carry out surveillance, ...

Researcher Khoa Dinh originally discovered the attack chain, and earlier this month, Code White GmbH was able to reproduce ...

CISA gave agencies until the end of the day on Monday to mitigate a severe zero-day vulnerability in Microsoft's widely used ...

More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

A vulnerability in Microsoft’s SharePoint Server is under active review by threat intelligence researchers as some have found ...

Microsoft has accused Chinese state-sponsored groups of exploiting its SharePoint document management software to target ...