The attacks appear to have escalated because Microsoft released incomplete patches for the initial vulnerabilities, according ...

Microsoft’s security analysts confirm that a number of cyber attacks on on-premise SharePoint Server users involve ransomware.

A China-linked threat actor has been observed exploiting SharePoint servers to deliver ransomware, according to Microsoft ...

Microsoft said Chinese actor Storm-2603 is deploying Warlock ransomware following the exploitation of vulnerabilities in ...

Explaining the modus operandi of the syndicate, CloudSEK stated that the perpetrators produced high-quality replica of Indian ...

A July 8 fix for a critical SharePoint zero-day failed to stop active exploitation, enabling state-backed attackers to breach ...

Hackers are actively exploiting a critical SharePoint zero-day (CVE-2025-53770), hitting 400+ firms and institutions like the ...

A Chinese hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks targeting the recently patched ToolShell zero-day exploit chain.

Microsoft has pointed the finger at three Chinese nation-state actors for exploiting the SharePoint vulnerabilities. Here's what we know about the security flaws and how to guard against future ...

ESET Research has been monitoring intense attacks involving the recently discovered ToolShell zero-day vulnerabilities.

More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.