toolshell sharepoint - Search News

News

Microsoft fixes 2 SharePoint zero-days under attack

Patch SharePoint Now: Microsoft Servers at Risk of New ToolShell RCE Attack

If exploited, attackers can gain full access to SharePoint content and potentially pivot to Outlook, Teams, and OneDrive. Learn how to protect your SharePoint server from compromise.

CRN · 3d

Five Things To Know On Microsoft SharePoint Server ‘ToolShell’ Attacks

An ongoing cyberattack campaign known as “ToolShell” is exploiting on-premises Microsoft SharePoint Servers and has reportedly compromised organizations worldwide.

SecurityWeek · 3d

Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers

Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.

Hacker Used SharePoint Flaw to Breach US Nuclear Agency

Computer Weekly · 20h

SharePoint users hit by Warlock ransomware, says Microsoft

Microsoft’s security analysts confirm that a number of cyber attacks on on-premise SharePoint Server users involve ransomware.

The Washington Post on MSN · 1d

U.S. nuclear and health agencies hit in Microsoft SharePoint breach

Victims of the recent global hacking campaign include the National Institutes of Health and the National Nuclear Security Administration, officials said.

PCMag on MSN · 1d

Report: Hacker Used SharePoint Flaw to Breach US Nuclear Agency

The Department of Energy, which oversees the agency that manages the US nuclear weapons stockpile, confirms it was affected by the SharePoint bug, but says it was 'minimally impacted.'

What to know about ToolShell, the SharePoint threat under mass exploitation

The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...

WeLiveSecurity1d

ToolShell: An all-you-can-eat buffet for threat actors

ESET Research has been monitoring intense attacks involving the recently discovered ToolShell zero-day vulnerabilities.

SecurityWeek1d

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named

More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.

3don MSN

Microsoft releases emergency security updates to fix SharePoint zero-day flaws — everything you need to know

M icrosoft has released two emergency patches to address zero-day vulnerabilities that have been found in SharePoint RCE.

WeLiveSecurity4h

SharePoint under fire: ToolShell attacks hit organizations worldwide

The ToolShell bugs are being exploited by cybercriminals and APT groups alike, with the US on the receiving end of 13 percent of all attacks.

Critical Sharepoint security vulnerability: First patches are available

Microsoft has now released a patch, but attackers were not idle over the weekend. Dozens of SharePoint installations fell ...

TweakTown4d

Hackers use Microsoft service to launch serious global attack at governments and businesses

At least 85 servers worldwide have been compromised through a Microsoft service vulnerability that has been used to achieve ...

The Hacker News5d

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing bug in Microsoft SharePoint Server that was addressed by ...

Some results have been hidden because they may be inaccessible to you

Show inaccessible results