News

The Hacker News14h
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers
The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing bug in Microsoft SharePoint Server that was addressed by ...
Microsoft SharePoint zero-day exploited in RCE attacks, no patch available
Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively ...
Devdiscourse3h
Microsoft Warns of 'Zero Day' Attacks on SharePoint Servers
Microsoft has issued a warning about active attacks on SharePoint server software used by government and business ...
Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks
Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" ...
SecurityWeek10h
SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available
Microsoft warned SharePoint Server users of a vulnerability dubbed ToolShell in the software that was assigned CVE-2025-53770 ...
The Register on MSN7h
Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack
PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more Infosec In Brief Microsoft has warned users of SharePoint Server that three on-prem versions of the ...
India Today on MSN1h
Microsoft SharePoint zero-day hack hits ‘tens of thousands' of servers globally
A zero-day vulnerability in Microsoft's SharePoint server software has triggered a global cyberattack affecting government and business networks. Tens of thousands of servers are at risk, with no ...