A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program, giving hackers a critical head start.

On July 20, 2025, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) issued urgent warnings about new, actively ...

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...

Researcher Khoa Dinh originally discovered the attack chain, and earlier this month, Code White GmbH was able to reproduce ...

Instead of protecting customers, the faulty patches may have served as a road map for hackers to hone their attacks, the researchers said.

Microsoft has attributed the cyberattacks to groups backed by China. The culprits are believed to include Chinese state ...

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

National Treasury has confirmed the detection of malware on its Infrastructure Reporting Model (IRM) website, potentially ...

Microsoft contained a major SharePoint security flaw, amid fresh questions about the future of its legacy on-premises ...

Several entities in South Africa have been compromised by hackers who exploited a security vulnerability in Microsoft’s ...

Microsoft has warned businesses about the security issue and now the Indian government has raised its own alert.

The company says several Chinese state-aligned groups have exploited the zero-day vulnerability disclosed on Saturday.