Skip to main content

Microsoft Releases Emergency Patches for Actively Exploited SharePoint Zero-Days

1 month ago
Microsoft has released emergency security updates for two actively exploited zero-day vulnerabilities in SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, that have compromised servers worldwide in what researchers call "ToolShell" attacks. The U.S. Cybersecurity and Infrastructure Security Agency warned over the weekend that hackers were exploiting the vulnerabilities to gain remote code execution on on-premises SharePoint installations, while Microsoft has not yet provided patches for all affected versions. The vulnerabilities allow hackers to steal private digital keys from SharePoint servers without requiring credentials, enabling them to plant malware and access stored files and data. Eye Security, which first identified the attacks on Saturday, found dozens of actively exploited servers and warned that SharePoint's integration with Outlook, Teams, and OneDrive could enable further network compromise. Researcher Silas Cutler at cybersecurity firm Censys estimated more than 10,000 companies with SharePoint servers were at risk, with the largest concentrations in the United States, Netherlands, United Kingdom, and Canada. Microsoft released patches for SharePoint 2019 and Subscription Edition but is still working on fixes for SharePoint Server 2016. Administrators must install available updates immediately and rotate machine keys to prevent re-compromise, according to Microsoft's security guidance.

Read more of this story at Slashdot.

msmash

Vintage computing boffin releases expansive Intel 286 test suite

1 month ago
A desire for cycle accuracy results in 32 million recorded CPU states derived entirely from original hardware

The developer of MartyPC, an emulator for vintage Intel-compatible hardware that targets cycle accuracy, has released a test suite for Intel's classic 80286 processor and compatibles – created, in a fit of raw enthusiasm and hyperfocus, by single-stepping a physical chip from the mid-1980s through the execution of almost 1.5 million instructions.…

Gareth Halfacree

T-Mobile is Bringing Low-Latency Tech To 5G For the First Time

1 month ago
T-Mobile is expanding support for the L4S standard across its 5G Advanced network over the next few weeks, becoming the first wireless carrier in the United States to implement the Low Latency, Low Loss, Scalable Throughput technology. The standard helps high-priority internet packets move with fewer delays to make video calls and cloud games feel smoother by allowing devices to manage congestion and reduce buffering issues that can occur even on higher bandwidth connections. L4S is already deployed in many cities, the company said. Users will not need special phones or plans to access the network-driven improvements.

Read more of this story at Slashdot.

msmash

Selling your digital soul to use Bluesky's DMs isn't just a bad idea, it's the law

1 month ago
Getting carded is one thing. A full strip search? Welcome to Britain

Opinion  On June 10, social network Bluesky announced that in 15 days it would introduce age verification for UK users, to comply with the UK Online Safety Act. As this law threatens non-compliant content companies with eight-figure fines from July 25, you can see why. The how, however, is breathtakingly inexcusable.…

Rupert Goodwins