Microsoft Addresses SharePoint Zero-Day Exploits Impacting Global Entities
TL;DR
Microsoft released an emergency security update for a SharePoint Server vulnerability (CVE-2025-53770) actively exploited by hackers to breach organizations, including U.S. federal agencies, with attackers installing a backdoor called ToolShell for remote access. Organizations are advised to implement immediate security measures and not wait for official patches, as the threat is spreading rapidly.
Topics:businesstechnology#cve-2025-53770#cyberattack#microsoft#security-update#sharepoint#technology
- Microsoft Fix Targets Attacks on SharePoint Zero-Day Krebs on Security
- Global hack on Microsoft product hits U.S., state agencies, researchers say The Washington Post
- Microsoft hit with SharePoint attack affecting global businesses and governments CNBC
- What to know about a vulnerability being exploited on Microsoft SharePoint servers AP News
- Hackers Exploit Microsoft SharePoint as Firm Works to Patch Bloomberg.com
Want the full story? Read the original reporting
Read on Krebs on Security