Tag
4 results in the archive.
The China-linked Warlock ransomware group exploited SharePoint vulnerabilities to gain initial access in attacks against water utilities, telecom providers, regional governments, and universities, underscoring ongoing risks to critical infrastructure and public sector organizations.
A critical SharePoint vulnerability (CVE-2026-55040) enables unauthenticated remote code execution, facilitated by AI, affecting several SharePoint Server versions.
Microsoft patched a critical SharePoint Server vulnerability, CVE-2026-50522, now actively exploited after a public proof-of-concept was released, enabling remote code execution via deserialization of untrusted data.
CISA issued a warning about three actively exploited vulnerabilities in Internet-exposed on-premises SharePoint Server instances that allow remote compromise.