News

Microsoft SharePoint attack: Officials issue warning about 'active exploitation'
Federal cybersecurity officials have issued a warning to Microsoft users about a security flaw allowing hackers to access to ...
DHS and HHS among federal agencies hacked in Microsoft SharePoint breach
Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have ...
Microsoft probing if Chinese hackers learned SharePoint flaws through alert, Bloomberg News reports
Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to ...
Microsoft SharePoint under 'active exploitation,' Homeland Security's CISA says
Microsoft said the company has been "coordinating closely with CISA, DOD Cyber Defense Command, and key cybersecurity ...
Microsoft SharePoint attack now sees victim count rises to 400 organizations, including US nuclear agency
New estimates regarding the recently-exploited Microsoft SharePoint vulnerabilities now evaluate that as many as 400 ...
CPO Magazine3d
Microsoft Releases Emergency Updates Amid Active Exploitation of SharePoint Zero-Day Vulnerability Chain
Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...
What to know about a vulnerability being exploited on Microsoft SharePoint servers
Microsoft is issuing an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have ...
Nextgov5d
DHS impacted in hack of Microsoft SharePoint products, people familiar say
The zero-day vulnerability — which was first disclosed late Saturday — has been exploited by several Chinese state-aligned ...
The Hacker News4d
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Storm-2603 exploits SharePoint flaws to deploy Warlock ransomware, affecting 400+ victims. Microsoft urges mitigation.
What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...