Microsoft warns of active attacks by Chinese hackers exploiting SharePoint flaws CVE-2025-49706 and CVE-2025-49704, urging urgent patching and mitigation steps.

The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...

Unknown threat actors have breached the National Nuclear Security Administration's network in attacks exploiting a recently ...

Microsoft SharePoint zero-day flaws were exploited to breach over 50 organizations, including the National Nuclear Security ...

Microsoft is facing mounting scrutiny after Chinese state-linked hacking groups exploited a critical flaw in its SharePoint ...

CISA flags Microsoft SharePoint flaws under active attack by Chinese hackers. U.S. agencies must patch by July 23 ...

Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities. Here's ...

This Alert was updated to reflect newly released information from Microsoft, and to correct the actively exploited Common ...

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.

Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell ...

A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech ...

Several hacking groups with ties to the Chinese government have been linked to a recent wave of widespread attacks targeting ...