sharepoint

3 articles · newest first

Microsoft's SharePoint bug had a missing half. Someone just published it — and honeypots are already lighting up

The JWT auth bypass we told you about two weeks ago just got its second half: a working RCE chain, two public PoCs, and active probing as of this week.

Priya Nair · 4d ago · 7 min

A Microsoft office building — CVE-2026-55040 affects on-premises SharePoint Server, not SharePoint Online

Software

a researcher posted SharePoint exploit code on Tuesday. attackers were forging admin access by Thursday

Microsoft patched this JWT flaw back in July. A public proof-of-concept turned it into real attacks in under 48 hours — here's exactly what's broken and how to check if you're exposed.

Priya Nair · Aug 20 · 6 min

Rows of server racks in a data center, representing the enterprise SharePoint infrastructure exposed by CVE-2026-63520

Software

an AI spent 24 days hacking SharePoint. it found a way in that needs zero login

Rapid7 pointed an agentic AI at Microsoft's code for 120 hours across 24 days — and it built the same kind of exploit chain nation-state hackers used to spend months on.

Priya Nair · Aug 13 · 6 min