The previous SharePoint on-premises solution (SharePoint 2016) is reaching the end of its life cycle. This also means that Microsoft will no longer provide support. Without security updates, the risk ...

ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they’re published. Last month, Microsoft announced that Chinese state-sponsored ...

A newly discovered critical flaw in Microsoft’s SharePoint platform has spurred a mad frenzy from hackers — including some working for the Chinese government, Google and Microsoft say. The identities ...

Several hacking groups with ties to the Chinese government have been linked to a recent wave of widespread attacks targeting a Microsoft SharePoint zero-day vulnerability chain. They used this exploit ...

Microsoft has released an emergency security update to address a critical vulnerability in its on-premises SharePoint Server software, following a wave of cyberattacks over the weekend. The attacks, ...

Update, July 21, 2025: This story, originally published on July 20, has been updated to include additional expert comments regarding the global zero-day attack impacting Microsoft on-premise ...

A large-scale attack on Microsoft’s server software, SharePoint, has affected systems across the world. The following SharePoint versions are at issue: Microsoft SharePoint Server Subscription Edition ...

Microsoft released updates today to patch a critical zero-day flaw in Microsoft SharePoint Server that attackers already have been hammering in an ongoing wave of attacks against US federal and state ...

On July 19, Microsoft alerted users that it was experiencing an active cyberattack on its SharePoint servers, which allow organizations to share and manage documents. According to The Washington Post, ...

Microsoft has warned that attackers are actively exploiting SharePoint vulnerabilities in a high-impact, ongoing campaign impacting critical sectors like government and healthcare. The campaign is ...

Microsoft has moved fast to blunt an active exploitation wave targeting on‑premises SharePoint Server, rolling out out‑of‑band fixes for two freshly numbered zero‑days—CVE‑2025‑53770 and the closely ...