Microsoft confirmed active exploitation of SharePoint flaw CVE-2026-65660, prompting CISA to add the RCE bug to its KEV list.

Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators ...

The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a ...

Entering 2026, the SharePoint page creation experience has evolved significantly.Previously, when creating a SharePoint page, ...

China-based Warlock ransomware operator is still targeting SharePoint flaws against critical infrastructure and government ...

So far, I have tried various things using Copilot in SharePoint. Summarizing files Asking questions about files Comparing ...

Many organizations have years of valuable knowledge stored in SharePoint, but employees often struggle to find and use it ...

Update, July 21, 2025: This story, originally published on July 20, has been updated to include additional expert comments regarding the global zero-day attack impacting Microsoft on-premise ...

After a user updates to version 2609 of Word, saving documents as PDFs to SharePoint Online locations can produce a nasty ...

Warlock ransomware is exploiting SharePoint flaws to target telecom, government, and university networks while disabling ...

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. An attacker ...

CISA adds exploited SharePoint RCE and RouterOS flaws to KEV; the RouterOS chain can give unauthenticated administrative ...