Update July 22, 2025: Microsoft has updated its blog and advisories, adding a patch for on-premises SharePoint 2016 -- noting again that related vulnerabilities do not affect SharePoint Online in ...

More than 1,300 internet-exposed SharePoint servers remain unpatched against CVE-2026-32201, a spoofing flaw Microsoft says was exploited as a zero-day.

Microsoft Systems administrators everywhere, it looks like you get a Patch Monday as a side dish to the usual Patch Tuesday this week. There's a full remote code vulnerability (RCE) exploit for ...

Hackers are actively exploiting a new zero-day bug in Microsoft's SharePoint Server software. The same software is used by key U.S. government agencies, including those tied to national security. The ...

TL;DR: Microsoft SharePoint on-premises servers face critical zero-day vulnerabilities actively exploited by hackers targeting government, education, energy, and private sectors worldwide. Despite ...

Microsoft has warned its business clients about serious security threats that could have an immediate impact on their server systems. The threat is linked to the SharePoint servers running via ...