sharepoint toolshell - Search News

Order byBest matchMost fresh

Microsoft, SharePoint and Warlock

Microsoft: SharePoint flaws exploited in Warlock ransomware attacks

A China-based hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks targeting the recently patched ToolShell zero-day exploit chain.

Computer Weekly · 7h

SharePoint users hit by Warlock ransomware, says Microsoft

· 2d

Patch SharePoint Now: Microsoft Servers at Risk of New ToolShell RCE Attack

· 20h

Microsoft says some SharePoint server hackers now use ransomware

The disclosure marks a potential escalation in the campaign, which has already hit at least 400 victims, according to Netherlands-based cybersecurity firm Eye Security.

· 1d

Microsoft servers hacked by Chinese groups, says tech giant

CSOonline · 13h

Microsoft’s incomplete SharePoint patch led to global exploits by China-linked hackers

Infosecurity Magazine2d

SharePoint 'ToolShell' Vulnerabilities Exploited by Chinese Nation-State Hackers

Microsoft has observed three China-based threat actors, Linen Typhoon, Violet Typhoon and Storm-2603, exploiting the SharePoint vulnerabilities

WeLiveSecurity14h

ToolShell: An all-you-can-eat buffet for threat actors

ESET Research has been monitoring intense attacks involving the recently discovered ToolShell zero-day vulnerabilities.

SecurityWeek2d

ToolShell Zero-Day Attacks on SharePoint: First Wave Linked to China, Hit High-Value Targets

More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities.

What to know about ToolShell, the SharePoint threat under mass exploitation

The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The researcher said he picked the name because it exploited ToolPane.aspx, a component for assembling the side panel view in the SharePoint user interface.

1don MSN

US agency overseeing nuclear weapons breached in Microsoft SharePoint attack

Microsoft SharePoint zero-day flaws were exploited to breach over 50 organizations, including the National Nuclear Security Administration.

SecurityWeek15h

ToolShell Attacks Hit 400+ SharePoint Servers, US Government Victims Named

More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.

htxt2d

On-prem SharePoint servers have a “potent and dangerous” vulnerability

A new vulnerability dubbed ToolShell is being used to compromise on-premise instances of Microsoft SharePoint servers. Attacks have ranged from highly targeted to opportunistic based on the value of the company operating the server.

Critical Sharepoint security vulnerability: First patches are available

Microsoft has now released a patch, but attackers were not idle over the weekend. Dozens of SharePoint installations fell victim of "ToolShell"