A top security researcher claims the massive SharePoint zero-day attack was fueled by a leak from a Microsoft partner program ...

Chinese-linked hackers breached several U.S. government agencies, including the Department of Homeland Security and the Department of Health and Human Services, by exploiting a vulnerability in ...

On July 20, 2025, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) issued urgent warnings about new, actively ...

Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code ...

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), ...

Employees at the National Science Foundation are pushing back against the Trump administration’s actions at the agency. Nearly 150 NSF employees signed a letter of dissent this week. They’re ...

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have ...

A July 8 fix for a critical SharePoint zero-day failed to stop active exploitation, enabling state-backed attackers to breach ...

Hackers are actively exploiting a critical SharePoint zero-day (CVE-2025-53770), hitting 400+ firms and institutions like the ...

A China-based hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks ...