Microsoft SharePoint

Reported Context (11)

Critical Elevation of Privilege Vulnerability in Microsoft SharePoint Microsoft’s October 2026 Patch Tuesday Fixes 1,413 Vulnerabilities, Including an Exploited Zero-Day
Symantec warned that the China-linked Warlock actor is exploiting multiple vulnerabilities in Microsoft SharePoint to deploy its namesake ransomware in attacks targeting organizations in Portuguese- and Microsoft Issues Out-of-Band Exchange Updates for Flaw That Could Expose Other Users’ Mailboxes
2025 and gained notoriety a month later after exploiting a chain of zero-day vulnerabilities in Microsoft SharePoint known as ToolShell (CVE-2025-49704, CVE-2025-49706, CVE-2025-53770, and CVE-2025-53771). Warlock Ransomware Group Exploits SharePoint Flaws and Disables Security Tools
CISA says attackers are actively exploiting critical flaws in WSO2 and Adobe Commerce, along with additional issues in Microsoft SharePoint and Mikrotik RouterOS. CISA Warns of Exploited Flaws in WSO2, Adobe Commerce, SharePoint and RouterOS
of the attack: Victims would be presented with a page that purports to be either a message from Microsoft Sharepoint or Teams. The page implies that there was either a document (in the case of the SharePoint Knight Office AiTM Kit Steals Microsoft 365 Session Tokens and Establishes Persistent Access

CVE (140)

Malware (24)

People (23)

Threat Actors (21)

MITRE ATT&CK (66)

Vendors (39)

Products (143)

Tools (20)

Industries (24)

Countries (12)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.