News

What to know about ToolShell, the SharePoint threat under mass exploitation
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The ...
Microsoft Used China-Based Engineers to Maintain Vulnerable SharePoint
Microsoft identified at least three threat groups believed to be affiliated with China that have been exploiting publicly ...
Microsoft SharePoint worries increase as ransomware gangs join the party, experts warn
The risk for businesses who haven’t patched the ToolShell vulnerability keeps growing after new reports suggest ransomware ...
Ransomware gangs join attacks targeting Microsoft SharePoint servers
Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader ...
Computing1d
Ransomware gangs exploit Microsoft SharePoint flaws in global attacks
Ransomware gangs have escalated a cyberattack campaign targeting Microsoft SharePoint servers, joining forces with suspected ...
SecurityWeek15d
ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets
More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the ...
Microsoft SharePoint bug puts critical government agencies at risk
Microsoft released patches for a SharePoint zero-day bug after hackers compromised over 400 servers worldwide using ...
CRN16d
Five Things To Know On Microsoft SharePoint Server ‘ToolShell’ Attacks
An ongoing cyberattack campaign known as “ToolShell” is exploiting on-premises Microsoft SharePoint Servers and has reportedly compromised organizations worldwide.
SecurityWeek13d
ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
Infosecurity Magazine15d
SharePoint 'ToolShell' Vulnerabilities Exploited by Chinese Nation-State Hackers
Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the ...
Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows
A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech ...
"We’re witnessing an urgent and active threat" — Microsoft SharePoint "ToolShell" vulnerability is being attacked globally
Global attacks forced Microsoft to push emergency updates to address vulnerabilities. Two zero-day vulnerabilities are at the center of attacks against United States federal and state agencies, ...