A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code ...

New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...

ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Microsoft has warned that attackers are varying their post-exploitation techniques while relying on the same ClickFix lure, ...

UB faculty and staff may use UB SharePoint to create an "intranet" for a department, project or service. Only people who have been granted access by the Site Owner will be able to view the site.

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

(Bloomberg) -- Microsoft Corp. accused Chinese state-sponsored hackers of using flaws in its SharePoint document management software in a hacking campaign that has targeted businesses and government ...

This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding ...

Eating its prey can be a process for a python, which is why it relies so heavily on its jaw to get the job done, including consuming a whole deer.

Threat actors are exploiting CVE-2026-58644, a Microsoft SharePoint RCE vulnerability patched on the July 2026 Patch Tuesday.