CRITICALRansomware
Global

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

·Source: BleepingComputer

Updated:

Executive Summary

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July. [...]

Analysis

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution vulnerability, which has been flagged as actively exploited since early July. [...]
Source Attribution

Originally published by BleepingComputer on Aug 11, 2026.

Related Threats

HIGHRansomware

Philips and GE investigating Clop ransomware data theft claims

Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data. [...]

BleepingComputer
HIGHRansomware

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a malicious actor to execute arbitrary code

CVE-2026-59310
The Hacker News
HIGHRansomware

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts

A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hanging fruit for criminals, and recent attacks on edtech... Source

DataBreaches.net