Microsoft identified at least three threat groups believed to be affiliated with China that have been exploiting publicly ...

Microsoft’s security advisory emphasizes that the emergency patches provide “more robust protections” compared to earlier fixes. CVE-2025-53770 offers enhanced security beyond the CVE-2025-49704 ...

Microsoft released patches for a SharePoint zero-day bug after hackers compromised over 400 servers worldwide using ...

CISA has published a malware analysis report with compromise indicators and Sigma rules for "ToolShell" attacks targeting ...

Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader ...

The risk for businesses who haven’t patched the ToolShell vulnerability keeps growing after new reports suggest ransomware actors are also joining the exploitation party. Researchers from Palo Alto ...

Chinese state-sponsored hackers exploited a SharePoint vulnerability, raising concerns over Microsoft's reliance on ...

CISA has published a Malware Analysis Report (MAR) with analysis and associated detection signatures on files related to Microsoft SharePoint vulnerabilities ...

July, this vulnerability has been actively exploited in the wild by multiple threat actors, including groups believed to be affiliated with nation-state interests. To date, more than 85 SharePoint ...

CVE-2025-53786 is an elevation of privilege bug that Outsider Security's Dirk-jan Mollema reported to Microsoft. It exists ...

The companies that fare best in the face of cyber threats aren't always the biggest or the most high-tech--they're the most ...

CrowdStrike Senior VP of Counter Adversary Operations Adam Meyers told The Register the same thing and likened Microsoft's ...