toolshell sharepoint - Search News

News

Microsoft fixes 2 SharePoint zero-days under attack

Patch SharePoint Now: Microsoft Servers at Risk of New ToolShell RCE Attack

If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive. Learn how to protect your SharePoint server from compromise.

Windows Central · 2h

"We’re witnessing an urgent and active threat" — Microsoft SharePoint "ToolShell" vulnerability is being attacked globally

The term "zero-day" attack refers to when a previously unknown vulnerability is targeted. Tens of thousands of servers are said to be at risk. While the issue is serious, it differs from several previous vulnerabilities related to Microsoft. The attack only affects on-premises servers; cloud-based servers are unaffected.

SecurityWeek · 8h

Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers

Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.

PCMag on MSN4h

Mass Exploitation: Hackers Hit Zero-Day Flaw in Microsoft's SharePoint

The newly discovered flaw in Microsoft's SharePoint software has allowed hackers to target dozens of companies and ...

SharePoint vulnerability with 9.8 severity rating is under exploit across the globe

The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated ...

14h

Critical Sharepoint security vulnerability: First patches are available

Microsoft has now released a patch, but attackers were not idle over the weekend. Dozens of SharePoint installations fell ...

TweakTown18h

Hackers use Microsoft service to launch serious global attack at governments and businesses

At least 85 servers worldwide have been compromised through a Microsoft service vulnerability that has been used to achieve ...

The Hacker News1d

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing bug in Microsoft SharePoint Server that was addressed by ...

Some results have been hidden because they may be inaccessible to you

Show inaccessible results