InfoSecBulletin Cybersecurity for mankind
Security researchers report that hackers have infiltrated a minimum of 400 organizations by capitalizing on a recently discovered zero-day vulnerability in Microsoft SharePoint. This alarming development indicates a significant increase in the number of identified breaches since the bug was unveiled last week.
Eye Security, a Dutch cybersecurity company, discovered a vulnerability in SharePoint, software used by companies to store and share documents. They reported finding hundreds of affected SharePoint servers online, a significant increase from just dozens earlier this week.
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Bloomberg reports that one of the affected organizations includes the National Nuclear Security Administration (NNSA), the federal agency responsible for maintaining and developing the U.S. stockpile of nuclear weapons. A spokesperson for the Department of Energy, which houses the NNSA, did not respond to TechCrunch’s request for comment.
Multiple government departments and agencies fell victim to early attacks that leveraged a SharePoint vulnerability, according to researchers. Evidence shows that hackers began exploiting this flaw on July 7.
CVE-2025-53770 is a bug that impacts self-hosted SharePoint versions. If exploited, it allows attackers to execute malicious code remotely, gaining access to files on the server and other systems in the company’s network.
The vulnerability is known as a zero-day because Microsoft had no time to release patches before it was exploited. Microsoft has since released patches for all affected SharePoint versions.
Google and Microsoft say they have evidence that several China-backed hacking groups are exploiting the bug, but warned companies to expect an uptick in compromises as more hacker groups seek to take advantage of the vulnerability. The Chinese government denied the allegations.
