SecurityIoT Botnets and Water Systems Top ThreatsDay
A weekly roundup: 296K-device botnet, 100+ water systems targeted, and a SharePoint RCE chain.
> Search
11 results for “sharepoint”
Security
Cyber CrimeFour Exploited Flaws Enter CISA KEV Catalog
CISA adds four actively exploited vulnerabilities affecting macOS, SharePoint, vCenter, and Windows IKE to its KEV catalog.
CloudMicrosoft 365 search outage linked to deployment bug
Microsoft is fixing a deployment issue causing search failures in Outlook, SharePoint, and OneDrive.
SecuritySharePoint Flaw Exploited After PoC Release
Threat actors are exploiting a critical SharePoint authentication bypass after Rapid7 released a PoC exploit.
SecurityAI-Assisted SharePoint Exploit Reaches Unauthenticated RCE
Researchers chain AI-found flaws to gain admin on SharePoint servers, bypassing authentication entirely.
SecurityCISA Ties SharePoint Flaw to Ransomware
CISA adds CVE-2026-45659 to KEV catalog, confirming ransomware abuse of a Microsoft SharePoint RCE flaw.
SecurityCritical SharePoint SSRF Flaw Disclosed
A critical server-side request forgery vulnerability in Microsoft Office SharePoint allows unauthorized network spoofing and carries a CVSS score of 9.6.
SecurityCISA Adds Microsoft SharePoint Deserialization Flaw to KEV Catalog
A critical deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, requiring immediate action from federal agencies.
SecurityCISA Adds Actively Exploited Microsoft SharePoint Flaw to KEV Catalog
A deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, prompting an urgent remediation deadline for federal agencies.
SecurityCISA Mandates Patching for SharePoint
Federal agencies must secure SharePoint servers against active exploitation of three critical remote code execution vulnerabilities.
Cyber CrimeVishing to Data Heist: Helix Group Elevates SharePoint Extortion Threat
A sophisticated new group named Helix leverages identity-based phishing and MFA abuse to infiltrate corporate SharePoint environments, exfiltrating sensitive data for extortion or sale.