The latest monthly Patch Tuesday update from Microsoft landed earlier on 14 April, including two notable zero-day flaws amid a total of more than 160 distinct issues, and almost 250 accounting for ...

Google on Thursday released security updates for its Chrome web browser to address two high-severity vulnerabilities that it said have been exploited in the wild. The list of vulnerabilities is as ...

Hundreds of organisations and government agencies have fallen victim to a widespread espionage campaign believed to have been undertaken by Chinese state-sponsored hackers after Microsoft failed to ...

The ESET research team has released their findings about exploitation of CVE-2025-53770 and CVE‑2025‑53771, zero-day vulnerabilities in on-premises Microsoft SharePoint servers dubbed ToolShell.

Microsoft has issued an emergency fix to close off a vulnerability in Microsoft’s widely used SharePoint software that hackers have exploited to carry out widespread attacks on businesses and at least ...

The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT services in the African region. "The attackers used hardcoded names of internal ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Birgitta Böckeler, Distinguished Engineer at ...

A novel phishing scam relying on legitimate servers from Microsoft’s collaborative platform SharePoint has been targeting at least 1600 individuals across Europe, the US and other countries using a ...