Microsoft fixes two SharePoint zero-days under attack, but it's not over - how to patch
zdnet.com/article/microsoft-fixes-two-sharepoint-zero-days-under-attack-but-its-not-over-how-to-patch/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
Similar to This
Previous
Microsoft releases emergency .NET patches for critical Brotli flaw: Microsoft released emergency .NET security updates to patch a critical vulnerability known as ...
bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/
Computerworld Jul 17
CISA urges immediate SharePoint hardening as exploits mount: Three actively exploited SharePoint vulnerabilities have landed in the KEV catalog ...
computerworld.com/article/4197818/cisa-urges-immediate-sharepoint-hardening-as-exploits-mount-2.html
dlvr.it Apr 14
Microsoft's massive Patch Tuesday: It's raining bugs: : One CVE under attack, one already disclosed by angry bug hunter, and 163 more
theregister.com/2026/04/14/microsofts_massive_patch_tuesday/
This 8-year-old Windows security flaw is still being exploited by hackers: A security vulnerability in Windows has been there since 2017, but Microsoft refuses ...
pcworld.com/article/2961752/this-8-year-old-windows-security-flaw-is-still-being-exploited-by-hackers.html
Ziff Davis Oct 06 25
An 8-Year Old Unity Bug Is Just Now Getting Attention: A vulnerable Unity Runtime code could allow attackers to to execute commands and steal confidential ...
extremetech.com/internet/an-8-year-old-unity-bug-is-just-now-getting-attention
CISA Issues Urgent Microsoft CVE-2025-53786 Security Warning: The US Cybersecurity and Infrastructure Security Agency has warned Microsoft users of a ...
forbes.com/sites/daveywinder/2025/08/07/cisa-issues-urgent-microsoft-cve-2025-53786-security-warning/
Microsoft probing if Chinese hackers learned SharePoint flaws through alert, Bloomberg News reports
reuters.com/technology/microsoft-probing-if-chinese-hackers-learned-sharepoint-flaws-through-alert-2025-07-25/
Microsoft server hack has now hit 400 victims, researchers say: A sweeping cyber-espionage campaign organization centered on vulnerable versions of Microsoft's ...
reuters.com/sustainability/boards-policy-regulation/microsoft-server-hack-has-now-hit-400-victims-researchers-say-2025-07-23/
Gizmochina Jul 26 25
Report: Hacker Used SharePoint Flaw to Breach US Nuclear Agency: The Department of Energy, which oversees the agency that manages the US nuclear weapons ...
uk.pcmag.com/security/159262/report-hacker-used-sharepoint-flaw-to-breach-us-nuclear-agency
Microsoft vulnerability exposes Finnish organisations to data breaches: A severe vulnerability in Microsoft SharePoint has led to data breaches worldwide ...
helsinkitimes.fi/business/27510-microsoft-vulnerability-exposes-finnish-organisations-to-data-breaches.html
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
reuters.com/sustainability/boards-policy-regulation/microsoft-knew-sharepoint-security-flaw-failed-effectively-patch-it-timeline-2025-07-22/
Microsoft server hack hit about 100 organizations, researchers say: A sweeping cyber espionage operation targeting Microsoft server software compromised about ...
reuters.com/sustainability/boards-policy-regulation/microsoft-server-hack-hit-about-100-organizations-researchers-say-2025-07-21/
Microsoft SharePoint Flaw Is Being Abused to Spread Ransomware: It's not just data theft. A China-based hacking group is using a flaw in vulnerable SharePoint ...
uk.pcmag.com/security/159288/microsoft-sharepoint-flaw-is-being-abused-to-spread-ransomware
Microsoft alerts businesses, governments to server software attack: Microsoft has issued an alert about "active attacks" on server software used by government ...
reuters.com/sustainability/boards-policy-regulation/microsoft-alerts-businesses-governments-server-software-attack-2025-07-21/
Key FactsMicrosoft Warns of Targeted SharePoint Server Attacks
Jul 21, 2025 · Reading time: ~45 sec.
Summary created with AI assistance · Source: reuters.com
Summary created with AI assistance · Source: reuters.com
- Microsoft reported ongoing attacks on SharePoint servers used by governments and businesses for document sharing.
- SharePoint Online in Microsoft 365's cloud service remains unaffected by the security breach.
- The vulnerability allows attackers to perform network spoofing, disguising their identities as trusted entities.
- Users are urged to apply security updates immediately or disconnect servers from the internet if malware protection is unavailable.
We've been coordinating closely with CISA, DOD Cyber Defense Command and key cybersecurity partners globally throughout our response.— A Microsoft spokesperson commented on the coordination with security agencies regarding the attacks.
Ziff Davis Jul 24 25
Microsoft Tried—and Failed—to Fix SharePoint Security Flaw Earlier This Month: Though the vulnerability was first identified in May, it's taken more than two ...
extremetech.com/internet/microsoft-tried-and-failed-to-fix-sharepoint-security-flaw-earlier-this
Microsoft identifies Chinese hacking groups behind persistent SharePoint server attacks
foxbusiness.com/fox-news-tech/microsoft-identifies-chinese-hacking-groups-behind-persistent-sharepoint-server-attacks
Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage
wired.com/story/microsoft-sharepoint-hack-china-end-of-life-updates/
What to know about ToolShell, the SharePoint threat under mass exploitation: Easy to exploit. Unauthenticated access. Massive reach. ToolShell has it all.
arstechnica.com/security/2025/07/what-to-know-about-toolshell-the-sharepoint-threat-under-mass-exploitation/
SharePoint targeted by Chinese ‘threat actor’ hackers, says Microsoft: Security vulnerabilities exploited in servers hosting document-sharing software used by ...
theguardian.com/technology/2025/jul/23/sharepoint-targeted-by-chinese-threat-actor-hackers-says-microsoft
Microsoft Releases Urgent Patch to Counter Server Attacks: What To Know: The attacks exploit a previously unknown vulnerability in Microsoft's document-sharing ...
newsweek.com/microsoft-patch-server-attack-counter-2101732
Next