SharePoint

One Malicious Web Request Can Turn an Exposed SharePoint Server Into a Persistent Backdoor

A newly disclosed cluster of Microsoft SharePoint Server vulnerabilities is actively being exploited in the wild, allowing attackers to convert…

3 months ago

Warlock Ransomware Exploits SharePoint ToolShell Zero-Day in New Attack Campaign

Chinese-linked threat actors behind the Warlock ransomware operation have emerged as a significant cybersecurity concern following their exploitation of a…

12 months ago

Microsoft Tapped China Engineers for SharePoint Support

A new investigation has revealed that Microsoft relied on China-based engineers to provide technical support and bug fixes for SharePoint,…

1 year ago

Warlock Ransomware Exploits SharePoint Flaws for Initial Access and Credential Theft

The Warlock ransomware group has intensified its operations by targeting unpatched on-premises Microsoft SharePoint servers, leveraging critical vulnerabilities to achieve…

1 year ago

CISA Warns of ‘ToolShell’ Exploitation Chain Targeting SharePoint Servers; IOCs and Detections Released

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding an exploitation chain dubbed "ToolShell" targeting on-premises…

1 year ago

Chinese Hackers Exploit SharePoint Flaws to Deploy Backdoors, Ransomware, and Loaders

Unit 42 researchers have identified significant overlaps between Microsoft's reported ToolShell exploit chain targeting SharePoint vulnerabilities and a tracked activity…

1 year ago

Microsoft SharePoint Server 0-Day Exploit Targets African Treasury, Companies, and University

A sophisticated zero-day exploit campaign targeting unpatched vulnerabilities in Microsoft SharePoint Server has compromised approximately 400 organizations worldwide, with potential…

1 year ago

ToolShell: Uncovering Five Critical Vulnerabilities in Microsoft SharePoint

Security researchers from Kaspersky have detailed a sophisticated exploit chain dubbed "ToolShell," actively targeting on-premise Microsoft SharePoint servers worldwide. The…

1 year ago

Microsoft Investigates Leak in Early Warning System Used by Chinese Hackers to Exploit SharePoint Vulnerabilities

Chinese laws requiring vulnerability disclosure to the government create transparency issues and potential conflicts for international cybersecurity efforts. Microsoft is…

1 year ago

Multiple Hacker Groups Exploit SharePoint 0-Day Vulnerability in the Wild

Microsoft has confirmed that a pair of zero-day vulnerabilities in on-premises SharePoint Server, collectively dubbed ToolShell, are under active exploitation…

1 year ago