Microsoft Releases Emergency Patches Amid Global SharePoint Exploits

TL;DR
Microsoft has issued emergency security updates for SharePoint to fix two zero-day vulnerabilities, CVE-2025-53770 and CVE-2025-53771, exploited in worldwide ToolShell attacks affecting over 54 organizations. Admins are advised to install the patches immediately, rotate machine keys, and investigate potential breaches using provided tools and logs.
Topics:businesstechnology#microsoft#security-patches#sharepoint#technology#toolshell-attacks#zero-day-vulnerabilities
- Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks BleepingComputer
- Global hack on Microsoft product hits U.S., state agencies, researchers say The Washington Post
- Microsoft Rushes to Stop Hackers from Wreaking Global Havoc Yahoo Finance
- Jim Cramer says buy these 2 cybersecurity stocks in the wake of Microsoft's attack CNBC
- Microsoft SharePoint under 'active exploitation,' Homeland Security's CISA says ABC News
Want the full story? Read the original reporting
Read on BleepingComputer