Tag: SharePoint
Four exploited flaws land on CISA urgent patch list
CISA adds four actively exploited flaws covering macOS, SharePoint, vCenter, and Microsoft IKE to its urgent patch catalog.
TWINLOOT hides inside Microsoft cloud to swipe logins and roam
New Windows implant TWINLOOT abuses SharePoint and Teams to steal credentials and move laterally.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Swiss federal office resets 200 accounts after SharePoint intrusion
Swiss federal IT office BIT resets roughly 200 accounts after a Microsoft SharePoint credential theft.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.
Microsoft patches record 622 flaws including two zero-days under attack
Microsoft's July 2026 Patch Tuesday fixes 622 CVEs including exploited SharePoint and AD FS zero-days
Helix Extortion Group Targets SharePoint with Vishing and Device Code Tactics
The Helix group uses vishing and device code phishing to break into SharePoint, then exfiltrates data for extortion or sale.