A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program, giving hackers a critical head start.

On July 20, 2025, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) issued urgent warnings about new, actively ...

Although Microsoft acknowledged the SharePoint problem, the original fix did not prevent hacking. Right now government and ...

There was a disturbance in the enterprise security world, and it started with a Pwn2Own Berlin. [Khoa Dinh] and the team at ...

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...

In a major cybersecurity incident, Chinese state-sponsored hacker groups exploited a critical zero-day vulnerability in Microsoft’s SharePoint software to breach over 100 organizations worldwide, ...

Software giant Microsoft is at the center of cybersecurity storm after China-linked hackers exploited flaws in SharePoint ...

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

Microsoft contained a major SharePoint security flaw, amid fresh questions about the future of its legacy on-premises software.

Microsoft confirms Chinese hackers exploited a SharePoint flaw; Patches now available. Cloud-based Microsoft 365 not affected ...

The company says several Chinese state-aligned groups have exploited the zero-day vulnerability disclosed on Saturday.

The zero-day vulnerability — which was first disclosed late Saturday — has been exploited by several Chinese state-aligned ...