Reported about 12 hours ago
Google and Microsoft report that Chinese-backed hackers are exploiting a zero-day vulnerability in Microsoft SharePoint, identified as CVE-2025-53770. This flaw allows attackers to steal sensitive information and deploy malware on vulnerable servers. Microsoft has noted that several hacking groups, including 'Linen Typhoon' and 'Violet Typhoon,' are targeting organizations worldwide, prompting urgent patch efforts. Despite a patch being made available, security experts warn that many self-hosted SharePoint systems may have already been compromised.
Source: YAHOO