Hackers are abusing SharePoint to break into people's emails ...

Microsoft warns of a new AitM phishing and BEC campaign targeting the energy sector with SharePoint-hosted malicious payloads ...

Microsoft’s January 2026 Patch Tuesday fixes 112 CVEs, including an exploited Windows DWM zero-day, plus critical flaws ...

An hours-long outage is preventing Microsoft's enterprise customers from accessing their inboxes, files, and video meetings.

Microsoft reports a multi-stage AitM phishing and BEC campaign abusing SharePoint, inbox rules, and stolen session cookies to ...

Microsoft services were abused in a new phishing campaign that targeted energy firms using malicious SharePoint links.

Microsoft uncovered how attackers bypassed security measures and stayed hidden inside compromised mailboxes for days.

NEW YORK (AP) — Microsoft has issued an emergency fix to close off a vulnerability in Microsoft’s widely-used SharePoint software that hackers have exploited to carry out widespread attacks on ...

Add Yahoo as a preferred source to see more of our stories on Google. The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) has posted an alert saying it is ...

Hackers believed to be associated with China have leveraged the ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint in attacks targeting government agencies, universities, ...

NEW YORK (AP) — Microsoft has issued an emergency fix to close off a vulnerability in Microsoft’s SharePoint software that hackers have exploited to carry out widespread attacks on businesses and at ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Every security team’s nightmare came true over the weekend: a ...