｢ Experts at the Symantec and Carbon Black Threat Hunter Team tracked multiple compromises involving CVE-2025-53770 — a vulnerability that caused alarm this summer when Microsoft warned its on-premises SharePoint customers that three separate China-based groups were exploiting it. Hundreds of governments and prominent businesses use SharePoint, particularly for maintaining their intranets ｣

https://therecord.media/sharepoint-toolshell-bug-breaches-governments-africa-south-america

#toolshel #sharepoint #cybersecurity #CVE202553770

⚠️ Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

｢ The attackers exploited two recently disclosed Microsoft SharePoint vulnerabilities — CVE-2025-53770, a spoofing flaw, and CVE-2025-49704, a remote code execution (RCE) bug — both affecting on-premises servers. Microsoft issued fixes for the vulnerabilities on July 19 ｣

https://www.csoonline.com/article/4074962/foreign-hackers-breached-a-us-nuclear-weapons-plant-via-sharepoint-flaws.html

#sharepoint #hacking #cybersecurity #CVE202549704 #CVE202553770