Microsoft confirms Chinese hackers exploited a SharePoint flaw; Patches now available. Cloud-based Microsoft 365 not affected.

Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”

Federal and state agencies have been plunged into panic after hackers prised open a gap in the armor of a Microsoft program’s security software, researchers have said. At least two unnamed federal agencies,

A global attack on Microsoft server software used by thousands of government agencies and businesses to share documents within organisations is likely the work of a single actor, a cybersecurity researcher said on Monday.

Russian cybercriminals are targeting Microsoft 365 accounts with specialized malware, the UK government's cybersecurity arm has warned.

Although the scope of the attack is still being assessed, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that the impact could be widespread and recommended that any servers impacted by the exploit should be disconnected from the internet until they are patched.

A major security vulnerability in Microsoft’s server software is being actively exploited by hackers, the Dutch National Cyber Security Center (NCSC) warned Monday. Microsoft has issued updates to mitigate the risk,