Microsoft’s Security Update Guide lists CVE-2025-55243 as a spoofing vulnerability in Microsoft OfficePlus that can lead to the exposure of sensitive information and enable an attacker to perform spoofing over a network, but key public mirrors and automated scrapers offer limited or inconsistent...
Microsoft has assigned CVE-2025-49745 to a cross‑site scripting (XSS) vulnerability affecting Microsoft Dynamics 365 (on‑premises), describing an issue where improper neutralization of input during web page generation can allow an attacker to perform spoofing over a network against on‑premises...
Microsoft has recently issued critical guidance concerning the active exploitation of vulnerabilities within on-premises SharePoint servers. These vulnerabilities, identified as CVE-2025-49704 and CVE-2025-49706, have been actively exploited, leading to unauthorized access and potential remote...
Microsoft has recently issued an urgent alert regarding active cyberattacks targeting on-premises SharePoint servers, a critical platform for document sharing and collaboration within organizations. These attacks exploit a previously unknown "zero-day" vulnerability, designated as...
Microsoft has recently issued an urgent alert regarding active cyberattacks targeting vulnerabilities in its on-premises SharePoint server software, a widely utilized platform for internal document sharing among businesses and government agencies. This "zero-day" exploit enables attackers with...
Original release date: July 16, 2020
Summary
This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques.
Attributing...