SharePoint

The China-linked ransomware group Warlock has been identified as exploiting vulnerabilities in Microsoft SharePoint to gain initial access to target organizations. This tactic was employed in recent attacks against a water utility, a telecommunications provider, a regional government body…

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of critical vulnerabilities affecting enterprise software products from Microsoft, WSO2, and Adobe Commerce. These exploits pose significant risks to organizations, enabling unauthorized access and potential…

Microsoft 365 facilitates straightforward file sharing, but this ease of use can lead to lingering access permissions long after a file's initial sharing purpose has concluded. This situation often results in organizations possessing limited visibility into which individuals retain access…

The cybersecurity landscape saw significant threats emerge in the past week, as detailed in the ThreatsDay report. A substantial Internet of Things (IoT) botnet comprising 296,000 devices was identified, posing a widespread risk due to the proliferation of unsecured connected…

Threat actors have commenced exploiting a critical Microsoft SharePoint vulnerability, identified as CVE-2026-55040, shortly after the public disclosure of proof-of-concept (PoC) code. This vulnerability, which carries a high CVSS score of 9.1, represents a significant security feature bypass stemming…

Switzerland's federal IT office confirmed that hackers successfully breached its Microsoft SharePoint servers, leading to the compromise of approximately 200 accounts. The breach occurred due to the exploitation of vulnerabilities within the SharePoint infrastructure.

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. This remote code execution (RCE) flaw allows attackers to compromise SharePoint servers and potentially gain unauthorized…

This week saw significant cybersecurity threats emerge, including critical vulnerabilities affecting widely used platforms. A remote code execution (RCE) flaw was identified in WordPress, allowing attackers to compromise websites with a single malicious request.

ACR Stealer, an infostealer active since 2024, is successfully exfiltrating sensitive data from enterprise networks, including saved browser passwords, active session tokens, PDF documents, Microsoft 365 files, and data from synced OneDrive and SharePoint folders.

A novel cybercriminal collective identified as Helix has begun targeting organizations by exploiting vulnerabilities within Microsoft SharePoint environments. This group employs a sophisticated array of identity-focused tactics to gain unauthorized access and exfiltrate sensitive data.

The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Wednesday that attackers have begun actively exploiting a critical remote code execution (RCE) vulnerability in Microsoft SharePoint. This flaw, identified as CVE-2023-29357, was patched by Microsoft in its May…