Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...

A critical Sitecore zero-day vulnerability is under active exploitation in the latest series of ViewState deserialization attacks this year. The vulnerability, tracked as CVE-2025-53690 and disclosed ...

In July 2025, a critical zero-day vulnerability (CVE-2025-53770) was publicly disclosed, affecting Microsoft SharePoint Server. The flaw enables unauthenticated remote code execution (RCE), by ...

Microsoft has patched three critical zero-day SharePoint security flaws that hackers have already exploited to attack more vulnerable organizations. Responding to the exploits, the software giant ...

Figure 2 shows the timeline of the attacks coming from the three most active IP addresses. Figure 2. Attacks from the most active IP addresses seen per hour (zero values not shown) Concerningly, ...

An as-yet unnamed Chinese state threat actor appears to be among those exploiting CVE-2025-53770 (aka ToolShell), a remote code execution vulnerability in Microsoft SharePoint, to conduct cyber ...

The zero-day in Microsoft SharePoint (CVE-2025-53770 and CVE-2025-53771) have been known for a few days now. What exactly happened, how was the zero-day discovered, and are we sure we caught it in ...

Microsoft has formally tied the exploitation of security flaws in internet-facing SharePoint Server instances to two Chinese hacking groups called Linen Typhoon and Violet Typhoon as early as July 7, ...

The recently disclosed critical Microsoft SharePoint vulnerability has been under exploitation as early as July 7, 2025, according to findings from Check Point Research. The cybersecurity company said ...

Organisations running on-premise instances of Microsoft’s SharePoint collaboration and document management platform should update without delay after multiple reports of an as-yet unidentified party ...

Microsoft Systems administrators everywhere, it looks like you get a Patch Monday as a side dish to the usual Patch Tuesday this week. There's a full remote code vulnerability (RCE) exploit for ...