Microsoft SharePoint vulnerability CVE-2026-65660 is being actively exploited, with evidence of attacks appearing soon after Microsoft’s August 2026 patch and Viettel Security’s technical disclosure. The flaw allows authenticated attackers with low-level access to execute arbitrary code, and CISA has already added it to the KEV catalog with a rapid federal patch...

CISA says attackers are actively exploiting critical flaws in WSO2 and Adobe Commerce, along with additional issues in Microsoft SharePoint and Mikrotik RouterOS. Federal agencies must patch the critical KEV entries by September 27, while SharePoint and RouterOS fixes are due by September 28. #WSO2 #AdobeCommerce #MicrosoftSharePoint #MikrotikRouterOS #CVE-2026-5430 #CVE-2026-71362 #CVE-2026-65660 #CVE-2026-67279

A zero-day vulnerability in Microsoft Corp.’s SharePoint with no known patch is being exploited in the wild with security researchers warning that attackers are actively compromising servers across...

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have been hacked as part of a wider breach of Microsoft SharePoint.​

: Let the games begin

YouTube video by Giuliano De Luca

Threat actors are piling on the zero-day vulnerabilities in SharePoint, including at least three Chinese nation-state cyberespionage groups.

security researcher Dmitry Lozovoy read more about Microsoft SharePoint Connector Flaw Could've Enabled Credential Theft Across Power Platform

Gamma where they are prompted read more about Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins

: US DOE among breached government agencies

Microsoft has redesigned Copilot Notebooks with a three-column layout, AI agents, and Quick Create tools, now available to commercial M365 Copilot users.

SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution

The US tech giant is recommending some users install security updates after the data breach.

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have been hacked as part of a wider breach of Microsoft SharePoint.​

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have been hacked as part of a wider breach of Microsoft SharePoint.​

Department of Homeland Security headquarters, several of its agencies and the Department of Health and Human Services have been hacked as part of a wider breach of Microsoft SharePoint.​

Microsoft says vulnerabilities in its SharePoint servers exposed as reports point to wave of attacks

Американське агентство, відповідальне за проєктування, обслуговування та утилізацію ядерної зброї, стало однією з жертв масштабної хакерської атаки, пов’язаної з уразливістю у програмному забезпеченні Microsoft SharePoint. Про це повідомило агентство Bloomberg із посиланням на джерело, знайоме з перебігом розслідування. Попри атаку, зловмисники не змогли отримати доступ до конфіденційних або секретних даних. Щоб дізнатись останні новини, слідкуйте […] Post Агентство з ядерної безпеки США стало жертвою хакерської атаки at Root-Nation.com.

Attackers are chaining CVE-2026-55040 and CVE-2026-63520 to target unpatched Microsoft SharePoint servers for remote code execution, with Defused reporting active probing in honeypots. Both flaws have public proof-of-concept exploits, and CISA has warned defenders to secure SharePoint systems against ongoing attacks. #CVE-2026-55040 #CVE-2026-63520 #MicrosoftSharePoint #Defused #CISA