Microsoft SharePoint

Reported Context (8)

identity is the real story. Managed ISPM defines the target configuration across Entra ID, Exchange, SharePoint and Teams and manages Conditional Access with pre-deployment impact analysis. From there, it keeps Why the SMB1001 Cybersecurity Standard Is Designed for Small Businesses
In July 2025, BleepingComputer covered the Microsoft SharePoint "ToolShell" zero-days (CVE-2025-53770 and CVE-2025-53771), exploited before a patch existed, with at least 85 on-premises servers compromised. How MSPs Can Secure RMM Software: Eight Controls to Test
Falcon Data Security for SaaS, now generally available, extends data security into SharePoint, OneDrive, and Copilot to help organizations discover sensitive data, understand risk, and automatically protect it. CrowdStrike Makes Falcon Data Security for SaaS Generally Available for Microsoft 365
to cloud accounts. Extortion groups "ShinyHunters" and "Helix" turned compromised identities into mass SharePoint data theft and extortion. And password resets alone didn't remove attacker-controlled devices, MFA ReliaQuest Report Tracks Top Attacker Techniques in June–August 2026
controls and use compromised identities to access and exfiltrate sensitive data from services including SharePoint, OneDrive, and Exchange. Threat Actors Target BYOD Users with Calls and Texts to Phish Microsoft 365 Credentials

CVE (97)

Malware (16)

People (8)

Threat Actors (13)

MITRE ATT&CK (16)

Vendors (37)

Products (89)

Tools (11)

Industries (7)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.