Microsoft fixes three SharePoint zero-day exploits used in series of cyberattacks - how to patch them
zdnet.com/article/microsoft-fixes-two-sharepoint-zero-days-under-attack-but-one-is-still-unresolved-how-to-patch/
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
News on this topic
Ziff Davis Jul 24 25
Microsoft Tried—and Failed—to Fix SharePoint Security Flaw Earlier This Month: Though the vulnerability was first identified in May, it's taken more than two ...
extremetech.com/internet/microsoft-tried-and-failed-to-fix-sharepoint-security-flaw-earlier-this
Similar to This
Previous
Latest Windows 11 update restores your taskbar control, patches 995 security flaws - ZDNET
zdnet.com/uncategorized/windows-11-september-2026-update/
Key FactsWindows 11 update enables new taskbar positions, fixes 995 flaws
Sep 8, 2026 · Reading time: ~45 sec.
Summary created with AI assistance · Source: zdnet.com
Summary created with AI assistance · Source: zdnet.com
- The taskbar can be positioned at the top, left, or right, but auto-hide still works only at the bottom.
- The Start menu supports size changes and independent showing or hiding of its content sections.
- The Search window now shows suggested or recent searches instead of top apps, AI tools, and promotions.
- According to Action1, the update contains 995 security fixes, including 121 critical vulnerabilities and two zero-days; one has already been actively exploited.
Microsoft’s September 2026 Patch Tuesday is the largest on record, with 995 patches, a volume unlike anything we’ve seen before and just shy of the 1,000 mark. The release includes 121 critical vulnerabilities and two zero-days, both elevation-of-privilege flaws: CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows Advanced Local Procedure Call (ALPC).— Action1 (patch management provider) said in a post on the latest update.
Microsoft warns of max severity Entra ID flaw exploited in attacks: Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access ...
bleepingcomputer.com/news/microsoft/microsoft-warns-of-max-severity-entra-id-flaw-exploited-in-attacks/
Microsoft's nemesis drops new zero-day privilege escalation vulnerability — attack grants system-level privileges, but it could already be patched
tomshardware.com/tech-industry/cyber-security/microsofts-nemesis-drops-new-zero-day-privilege-escalation-vulnerability-attack-grants-system-level-privileges-but-it-could-already-be-patched
Windows 10/11 July Patch Tuesday fixes a colossal 570 vulnerabilities: Windows 11 users should apply the Patch Tuesday update this month as it fixes 570 ...
neowin.net/news/windows-1011-july-patch-tuesday-fixes-a-colossal-570-vulnerabilities/
Computerworld Jul 17
CISA urges immediate SharePoint hardening as exploits mount: Three actively exploited SharePoint vulnerabilities have landed in the KEV catalog ...
computerworld.com/article/4197818/cisa-urges-immediate-sharepoint-hardening-as-exploits-mount-2.html
Microsoft patches RoguePlanet Defender zero-day vulnerability: Microsoft has released a security patch to address a Defender zero-day vulnerability known as ...
bleepingcomputer.com/news/microsoft/microsoft-patches-rogueplanet-defender-zero-day-vulnerability/
Microsoft patches record 206 Windows bugs in June update - and 3 are zero days: Among the 206 vulnerabilities are 32 critical ones and three publicly disclosed ...
zdnet.com/article/microsofts-june-windows-update-fixes-198-bugs-install-patch-asap/
Microsoft releases Windows 10 KB5075912 extended security update: Microsoft has released the Windows 10 KB5075912 extended security update to fix February 2026 ...
bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5075912-extended-security-update/
This 8-year-old Windows security flaw is still being exploited by hackers: A security vulnerability in Windows has been there since 2017, but Microsoft refuses ...
pcworld.com/article/2961752/this-8-year-old-windows-security-flaw-is-still-being-exploited-by-hackers.html
Critical WSUS flaw in Windows Server now exploited in attacks: Attackers are now exploiting a critical-severity Windows Server Update Service (WSUS) ...
bleepingcomputer.com/news/security/hackers-now-exploiting-critical-windows-server-wsus-flaw-in-attacks/
Ziff Davis Oct 06 25
An 8-Year Old Unity Bug Is Just Now Getting Attention: A vulnerable Unity Runtime code could allow attackers to to execute commands and steal confidential ...
extremetech.com/internet/an-8-year-old-unity-bug-is-just-now-getting-attention
Microsoft patches critical Entra ID flaws that endangered millions of tenants: Microsoft recently patched a critical security vulnerability in its Entra ID ...
techspot.com/news/109565-microsoft-patches-critical-entra-flaws-endangered-millions-tenants.html
WIRED Sep 18 25
This Microsoft Entra ID Vulnerability Could Have Been Catastrophic: A pair of flaws in Microsoft's Entra ID identity and access management system could have ...
wired.com/story/microsoft-entra-id-vulnerability-digital-catastrophe/
Microsoft identifies Chinese hacking groups behind persistent SharePoint server attacks
foxbusiness.com/fox-news-tech/microsoft-identifies-chinese-hacking-groups-behind-persistent-sharepoint-server-attacks
Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage
wired.com/story/microsoft-sharepoint-hack-china-end-of-life-updates/
Microsoft fixes two SharePoint zero-days under attack, but it's not over - how to patch
zdnet.com/article/microsoft-fixes-two-sharepoint-zero-days-under-attack-but-its-not-over-how-to-patch/
Two exploits are threatening Secure Boot, but Microsoft is only patching one of them
techspot.com/news/108280-two-exploits-threatening-secure-boot-but-microsoft-only.html
Microsoft's June update fixes dozens of Windows and Office security flaws: Microsoft fixed 66 security vulnerabilities with the monthly update in June 2025 ...
pcworld.com/article/2811453/microsofts-june-update-fixes-dozens-of-windows-and-office-security-flaws.html
Next