News

GovInfoSecurity1h

US Nuclear Agency Breach Tied to SharePoint Zero-Days

The U.S. government agency that maintains and designs America's nuclear weapons was reportedly breached by attackers ...

US agency overseeing nuclear weapons breached in Microsoft SharePoint attack

Microsoft SharePoint zero-day flaws were exploited to breach over 50 organizations, including the National Nuclear Security ...
SecurityWeek1d

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets

More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the ...
Infosecurity Magazine1d

SharePoint 'ToolShell' Vulnerabilities Exploited by Chinese Nation-State Hackers

Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the ...

"We’re witnessing an urgent and active threat" — Microsoft SharePoint "ToolShell" vulnerability is being attacked globally

SharePoint vulnerabilities are under active attack. Microsoft released emergency patches, but some SharePoint versions remain unpatched.
SecurityWeek12h

Microsoft Says Chinese APTs Exploited ToolShell Zero-Days Weeks Before Patch

Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell ...

Microsoft releases emergency security updates to fix SharePoint zero-day flaws — everything you need to know

M icrosoft has released two emergency patches to address zero-day vulnerabilities that have been found in SharePoint RCE.

Critical Sharepoint security vulnerability: First patches are available

Microsoft has now released a patch, but attackers were not idle over the weekend. Dozens of SharePoint installations fell ...