Product
Microsoft SharePoint
- First Reported
- May 28, 2026
- Latest Reported
- Oct 5, 2026
Reported Context (5)
- Symantec warned that the China-linked Warlock actor is exploiting multiple vulnerabilities in Microsoft SharePoint to deploy its namesake ransomware in attacks targeting organizations in Portuguese- and Microsoft Issues Out-of-Band Exchange Updates for Flaw That Could Expose Other Users’ Mailboxes
- of the attack: Victims would be presented with a page that purports to be either a message from Microsoft Sharepoint or Teams. The page implies that there was either a document (in the case of the SharePoint Knight Office AiTM Kit Steals Microsoft 365 Session Tokens and Establishes Persistent Access
- Microsoft SharePoint Recorded Future Identifies 85 High-Impact Vulnerabilities in July, Many Actively Exploited
- Microsoft SharePoint was compromised by splitline of DEVCORE Research Team, earning US$100,000. Pwn2Own Berlin 2026 Uncovers 47 Zero-Days Across AI and Enterprise Products
- effective because it abuses trusted platforms at every stage: Microsoft Teams for initial contact, Microsoft SharePoint for payload delivery, Quick Assist for remote access, Pastebin for instruction delivery, and Teams Vishing Campaign Deploys Nimbus RAT Using Quick Assist and Google Drive
CVE (82)
Malware (7)
People (12)
Threat Actors (11)
MITRE ATT&CK (24)
Vendors (35)
Products (105)
Tools (9)
Industries (5)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.