
Critical SharePoint Zero-Day Under Attack: Action Plan for CVE-2025-53770
Critical SharePoint RCE (CVE-2025-53770): What SecOps teams must do right now, from patching to hunting the 'ToolShell' campaign. Your immediate action plan.
Topic
Every article tagged CVE-2025-53770, newest first.

Critical SharePoint RCE (CVE-2025-53770): What SecOps teams must do right now, from patching to hunting the 'ToolShell' campaign. Your immediate action plan.

Critical, actively exploited zero-day RCE vulnerability in SharePoint Server (CVE-2025-53770). This is your guide to understanding, identifying, and mitigating the threat immediately.
Looking for something specific?
Search every article by topic, tool or CVE.
Keep reading

GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.