News

What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
Microsoft SharePoint worries increase as ransomware gangs join the party, experts warn
The risk for businesses who haven’t patched the ToolShell vulnerability keeps growing after new reports suggest ransomware ...
Microsoft Used China-Based Engineers to Maintain Vulnerable SharePoint
Microsoft identified at least three threat groups believed to be affiliated with China that have been exploiting publicly ...
Ransomware gangs join attacks targeting Microsoft SharePoint servers
Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader ...
Computing1d
Ransomware gangs exploit Microsoft SharePoint flaws in global attacks
Ransomware gangs have escalated a cyberattack campaign targeting Microsoft SharePoint servers, joining forces with suspected ...
SecurityWeek15d
ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets
More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the ...
Microsoft SharePoint bug puts critical government agencies at risk
Microsoft released patches for a SharePoint zero-day bug after hackers compromised over 400 servers worldwide using ...
SecurityWeek13d
ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
CRN15d
Five Things To Know On Microsoft SharePoint Server ‘ToolShell’ Attacks
An ongoing cyberattack campaign known as “ToolShell” is exploiting on-premises Microsoft SharePoint Servers and has reportedly compromised organizations worldwide.
Again? Microsoft hit for poor security in major SharePoint hack
The company has been called out repeatedly for inadequate security practices, and now we have another case in point: a ...
WeLiveSecurity13d
ToolShell: An all-you-can-eat buffet for threat actors
ESET Research has been monitoring intense attacks involving the recently discovered ToolShell zero-day vulnerabilities.
Computer Weekly15d
Patch ToolShell SharePoint zero-day immediately, says Microsoft
Dubbed ToolShell, the related vulnerabilities, CVE-2025-53770 and CVE-2025-53771, allow for remote code execution (RCE) and server spoofing in SharePoint.