US Edition
U.S. CISA urges FCEB agencies to fix two Microsoft SharePoint flaws immediately and added them to its Known Exploited Vulnerabilities catalog
15 Articles
15 Articles
Gaps in Microsoft Sharepoint may have been exploited • The program is common among authorities and companies
securelist.com
Malware Analysis, News and IndicatorsToolShell: a story of five vulnerabilities in Microsoft SharePoint
On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not require authentication, allowed attackers to gain full control over the infected servers, and were performed using an exploit chain of two vulnerabilities: CVE-2025-49704 and CVE-2025-49706, publicly named “ToolShell”. Additionally, on the same dates, Mi…
Why do we keep falling into phishing?The oldest internet trap still dominates Peru and companies are not savedPhotos of nudes generated by artificial intelligence feed deadly wave of digital blackmail Chinese state-sponsored hackers are exploiting critical security vulnerabilities in users of Microsoft's popular SharePoint servers to steal sensitive data, the tech giant warned on Tuesday.
Microsoft has issued urgent security updates for SharePoint, its corporate collaboration platform, after confirming that two critical vulnerabilities were being actively exploited by attackers. The flaws, identified as CVE-2025-53770 and CVE-2025-53771, affect local versions of SharePoint and allow remote code execution (RCE) attacks, which opens the door to unauthorized access within business environments. What is happening with SharePoint? In …
Metasploit Module Released For Actively Exploited SharePoint 0-Day Vulnerabilities - Cybernoz - Cybersecurity News
Researchers have developed a new Metasploit exploit module targeting critical zero-day vulnerabilities in Microsoft SharePoint Server that are being actively exploited in the wild. The module, designated as pull request #20409 in the Metasploit Framework repository, addresses CVE-2025-53770 and CVE-2025-53771, which enable unauthenticated remote code execution (RCE) attacks against vulnerable SharePoint installations. Key Takeaways1. SharePoint…
Coverage Details
Bias Distribution
- 100% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium
