Threat actors are exploiting complex routing scenarios and misconfigured spoof protections to send spoofed phishing emails, ...

9.0.4 and 8.3.0 GET /sites/SystemCatalogue/_vti_bin/wopi.ashx/files/66d5272266a948268490dda1bcb201f5?access_token ...

If your SharePoint sites have always seemed a little stodgy, Microsoft is finally relaxing things a bit. The new update, scheduled to release between late August and mid-September, introduces a ...

Microsoft is giving SharePoint creators a new productivity boost. Starting this week, a new feature called “Sections with AI” is rolling out. As the name suggests, this feature letting you build ...

In July 2025, a critical zero-day vulnerability (CVE-2025-53770) was publicly disclosed, affecting Microsoft SharePoint Server. The flaw enables unauthenticated remote code execution (RCE), by ...

The zero-day in Microsoft SharePoint (CVE-2025-53770 and CVE-2025-53771) have been known for a few days now. What exactly happened, how was the zero-day discovered, and are we sure we caught it in ...

Any business operating an on-premises (on-prem) Microsoft SharePoint server may want to take note of attacks targeting this infrastructure happening right now. The attack has been named ToolShell and ...

A zero-day vulnerability in Microsoft Corp.’s SharePoint with no known patch is being exploited in the wild as security researchers warn that attackers are actively compromising servers across ...

As Red Teamers, we often find information in SharePoint that can be useful for us in later attacks. As part of this we regularly want to download copies of the file, or parts of their contents. In ...

Permissions management is a crucial function for most SharePoint sites. This page will describe the typical process for creating and managing group permissions and individual file and folder access.