On September 2026 Patch Tuesday Microsoft delivered a record-breaking number of patches, including for two bugs exploited as zero-days.

New licensing and pricing changes for on-premises server products coming this summer.

Microsoft's August 2026 Patch Tuesday delivered 400+ security fixes, including one for an actively exploited zero-day flaw (CVE-2026-68820).

CISA warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises Microsoft SharePoint Server instances to bypass authentication, execute code remotely, and steal IIS machine keys for persistence. The agency also highlighted additional SharePoint flaws that were patched by Microsoft, urging immediate patching, hardened configurations, and monitoring to protect affected servers. #CISA #MicrosoftSharePoint #SharePointServer #CVE-2026-32201 #CVE-2026-45659 #CVE-2026-56164

An attacker can gain higher-level access to a Microsoft SharePoint Server, potentially allowing them to view or modify sensitive information.

Microsoft released patches for 622 vulnerabilities, including zero-days in Active Directory Federation Services and SharePoint Server that were already being exploited in the wild. The update also addressed high-severity issues across Windows, Office, BitLocker, Exchange Server, RDP, and other products, while Adobe fixed 88 additional flaws. #CVE-2026-56155 #CVE-2026-56164 #CVE-2026-50661 #SharePointServer #ActiveDirectoryFederationServices...

Protect your systems as Microsoft warns of active zero-day attacks on SharePoint servers.

Microsoft has increased the prices of its on-premises server products and Client Access License (CAL) Suites by up to 20%. Organizations will have to decide whether to stay or go to Cloud products.

A critical Microsoft SharePoint vulnerability (CVE-2026-20963) disclosed in January has been observed exploited in the wild and was added to CISA's Known Exploited Vulnerabilities catalog. The deserialization-based remote code execution flaw affects SharePoint Server 2016, 2019, and Subscription Edition and was rated CVSS 9.8 with federal remediation required. #CVE-2026-20963 #SharePointServer...

Customer guidance for SharePoint vulnerability CVE-2025-53770

Exchange Server and SharePoint Server are business-critical assets and considered crown-jewels for many organizations, making them attractive targets for attacks. To help customers protect their envir...

Microsoft has confirmed that Chinese nation-state actors are actively exploiting zero-day vulnerabilities in on-premises SharePoint servers.

■0403花蓮地震募金口座を開設https://www.mohw.gov.tw/cp-16-78264-1.html■Snykの新しいSBOM機能で、ソフトウェアサプライチェーンのセキュリティリスクに対処するhttps://www.lac.co.jp/lacwatch/service/20230810_00345...

【 #ITニュース 】SharePointServerへの攻撃は中国ハッカー集団によるもの──Microsoftが説明 #SharePointServer #ITmedia

【 #ITニュース 】MicrosoftSharePointのゼロデイ脆弱性、RCE攻撃で悪用パッチ公開済み #SharePointServer #ITmedia

Starting in June 2026, OneDrive for iOS and Android will block sign-ins using SharePoint Server on-premises credentials. Microsoft Entra ID and personal Microsoft accounts are not affected.