News & Analysis as of July 27, 2025

Cybersecurity › Vulnerability Assessments › Microsoft

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

SharePoint Server Vulnerabilities Exploited Despite Emergency Patch

Robinson+Cole Data Privacy + Security Insider on 7/25/2025

Microsoft has confirmed that vulnerabilities in its on-premises SharePoint Server installations, a network spoofing vulnerability (CVE-202549706), and a remote code execution vulnerability (CVE-2025-49704) are being actively...more

Active and Critical Security Concern for SharePoint

Lowenstein Sandler LLP on 7/25/2025

On July 20, 2025, Microsoft and the Cybersecurity and Infrastructure Security Agency (CISA) issued urgent warnings about new, actively exploited vulnerabilities in Microsoft SharePoint Server. These vulnerabilities, known as...more

Critical Microsoft SharePoint Vulnerability: What You Need to Know

Baker Donelson on 7/23/2025

Microsoft has just disclosed a serious vulnerability in SharePoint (CVE-2025-53770) that allows unauthenticated attackers to remotely execute code in a SharePoint server hosted on-prem – no user interaction required....more

Microsoft Report Highlights Attacks Against Healthcare Organizations

Robinson+Cole Data Privacy + Security Insider on 10/24/2024

On October 22, 2024, Microsoft issued a threat trend research report entitled “US Healthcare at risk: Strengthening resilience against ransomware attacks.” In it, Microsoft declares that ransomware attacks against the...more

Scattered Spider Using RansomHub and Qilin Ransomware Against Victims

Robinson+Cole Data Privacy + Security Insider on 7/25/2024

We previously reported on the concerning mash-up of worldwide cybercriminals, known as Scattered Spider, working together to attack victims. New reports from Microsoft and others indicate that in the second quarter of...more

Patch, Patch, Patch: Updates for Fortinet, Microsoft, and Adobe Products

Robinson+Cole Data Privacy + Security Insider on 3/14/2024

Patching vulnerabilities is a difficult task. Keeping up with and patching them without disrupting users’ experience is tricky. Nonetheless, it is a necessary evil and crucial to cybersecurity hygiene and incident prevention....more

Security Snippets: Microsoft SharePoint vulnerability to watch out for

Hogan Lovells on 1/23/2024

A vulnerability in Microsoft SharePoint has been flagged as being actively exploited by CISA. A vulnerability in Microsoft SharePoint is being actively exploited according to CISA’s known exploited vulnerabilities (KEV)...more

Kudos to Microsoft’s Takedown of Storm-1152

Robinson+Cole Data Privacy + Security Insider on 12/18/2023

There was a big win for the good guys against the bad guys this week. On December 13, 2023, after obtaining an order from the federal court in the Southern District of New York to seize U.S. based infrastructure and take...more

Best Patch Management Strategy for Remote Workers

Accelerynt, Inc. on 6/12/2023

Like it or not, the remote workforce is here to stay. Statistics show that employees say they are more productive working from home, and even before the global pandemic, there had been a 44% growth in the remote workforce...more

Ankura CTIX FLASH Update - October 2022 - 3

Ankura on 10/21/2022

Prestige Ransomware Emerges, Targets Ukraine and Poland - A new ransomware variant has emerged in the wild, being used in targeted attacks against the logistics and transportation sectors within Ukraine and Poland. The...more

Data Privacy + Cybersecurity Insider - October 2022

Robinson & Cole LLP on 10/14/2022

CYBERSECURITY - CISA Recommends Following Microsoft’s Mitigation for Zero Day Exploits - Microsoft recently issued mitigation steps for vulnerabilities that are being actively exploited by threat actors. Microsoft...more

CISA Recommends Following Microsoft’s Mitigation for Zero Day Exploits

Robinson+Cole Data Privacy + Security Insider on 10/13/2022

Microsoft recently issued mitigation steps for vulnerabilities that are being actively exploited by threat actors. Microsoft stated that it is aware that two vulnerabilities are being actively exploited to access users’...more

Patch Tuesday Release Includes Fix for Actively-Exploited Flaw

Robinson+Cole Data Privacy + Security Insider on 4/15/2022

Microsoft released its monthly patches this week to fix 128 vulnerabilities, including 10 rated as critical, 115 as important, and three flagged as moderately severe. One of the vulnerabilities (CVE-2022-24521 Windows Common...more

Data Privacy + Cybersecurity Insider - November 2021 #2

Robinson & Cole LLP on 11/12/2021

CYBERSECURITY - November's "Patch Tuesday" Includes 55 Patches - Staying current with Microsoft’s monthly patches is challenging, yet critical for one’s cybersecurity program. This week, Microsoft’s November Patch...more

November’s Patch Tuesday Includes 55 Patches

Robinson+Cole Data Privacy + Security Insider on 11/12/2021

Staying current with Microsoft’s monthly patches is challenging, yet critical for one’s cybersecurity program. This week, Microsoft’s November Patch Tuesday released 55 patches, six of which were categorized as “critical,”...more

SolarWinds Hackers Focus on Downstream Vendors as Next Victims

Robinson+Cole Data Privacy + Security Insider on 10/29/2021

In a blog post entitled “New activity from Russian actor Nobelium,” Microsoft’s V.P. of Customer Security & Trust Tom Burt discussed a recent alert issued by the Microsoft Threat Intelligence Center (MSTIC) regarding the...more

Data Privacy + Cybersecurity Insider - October 2021 #2

Robinson & Cole LLP on 10/20/2021

CYBERSECURITY - Apple + Microsoft Release Patches for Identified Vulnerabilities - This week, both Apple and Microsoft issued patches to fix serious zeroday vulnerabilities that should be applied as soon as possible. That...more

Microsoft Warns of Tricky O365 Phishing Attack

Robinson+Cole Data Privacy + Security Insider on 8/4/2021

If you are an organization that uses Microsoft Office 365 as your email platform, be on the lookout for a new tricky phishing attack recently used by cyber criminals. ...more

Data Privacy + Cybersecurity Insider - July 2021 #2

Robinson & Cole LLP on 7/9/2021

CYBERSECURITY - Microsoft Issues Emergency Software Update for PrintNightmare Zero Day Vulnerability - Following the release of a U.S. Cybersecurity & Infrastructure Security Agency (US-CERT) Coordination Center...more

Microsoft Issues Emergency Software Update for PrintNightmare Zero Day Vulnerability

Robinson+Cole Data Privacy + Security Insider on 7/8/2021

Following the release of a U.S. Cybersecurity & Infrastructure Security Agency (US-CERT) Coordination Center VulNote “for a critical remote code execution vulnerability in the Windows Print spooler services” on June 30,...more

Microsoft Customers Warned of Targeted Scams by NOBELLIUM

Robinson+Cole Data Privacy + Security Insider on 7/2/2021

Another fall-out from the SolarWinds incident has surfaced prompting Microsoft to issue a notice to affected customers that an attacker gained access to one of its customer service agents to launch hacking attacks against...more

The Illinois Department of Insurance Issues Cybersecurity Guidance Regarding Microsoft Exchange Server Installations

Hinshaw & Culbertson - Privacy, Cyber & AI... on 6/4/2021

The Illinois Department of Insurance (the "Department") recently released guidance to all regulated entities concerning vulnerabilities in Microsoft's Exchange Server installations. Issued on the heels of other state and...more

NSA Issues New Warning About Four Critical Patches to Microsoft Exchange Servers

Robinson+Cole Data Privacy + Security Insider on 4/23/2021

The National Security Agency (NSA) recently issued a warning to private industry about four zero-day vulnerabilities in Microsoft Exchange Server versions 2013, 2016, and 2019 used on-premises....more

CISA Releases Free Tool to Detect Potential Compromised Microsoft Accounts

Robinson+Cole Data Privacy + Security Insider on 4/16/2021

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) recently released a free tool that will assist organizations with identifying indicators of compromise following threat activity in...more

Data Privacy + Cybersecurity Insider - March 2021

Robinson & Cole LLP on 3/12/2021

CYBERSECURITY - Microsoft Releases Additional Resources for Exchange Flaws and CISA Issues Alert - As we alerted our readers last week, Microsoft announced that its Exchange email servers have been compromised, which is...more

41 Results

/

View per page

Page: of 2

Next »