Cybercriminals are exploiting a zero-day vulnerability, CVE-2025-53771, in Microsoft SharePoint servers without needing login ...

The attack was linked to Scattered Spider, a hacking collective that uses techniques like voice phishing to trick IT help ...

Microsoft identified three China-based hacking groups targeting SharePoint vulnerabilities in the ongoing cyberattack, and urged customers to ensure they've applied security updates.