Tag: SharePoint
A China-tied crew keeps hammering unpatched SharePoint servers
Longlegs and Storm-2603 keep breaching unpatched SharePoint servers to plant Warlock ransomware.
A SharePoint spoofing bug turned out to be full remote code execution
Microsoft scored the flaw 6.5 as a spoofing issue, while the National Vulnerability Database calls the same bug an 8.8…
Four exploited flaws land on CISA urgent patch list
CISA adds four actively exploited flaws covering macOS, SharePoint, vCenter, and Microsoft IKE to its urgent patch catalog.
TWINLOOT hides inside Microsoft cloud to swipe logins and roam
New Windows implant TWINLOOT abuses SharePoint and Teams to steal credentials and move laterally.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Swiss federal office resets 200 accounts after SharePoint intrusion
Swiss federal IT office BIT resets roughly 200 accounts after a Microsoft SharePoint credential theft.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.