Hackers leverage new Microsoft SharePoint exploit in attacks

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May. [...]

<h1> CVE-2026-65660: a SharePoint code injection reachable with an ordinary user account </h1> <p>SharePoint is rarely treated as a perimeter system, which is why a flaw in it

Over 1,300 Microsoft SharePoint servers exposed online remain unpatched against a spoofing vulnerability that was exploited as a zero-day and is still being abused in ongoing