Microsoft Urges SharePoint Security Updates Amid Global Hack Threats
TL;DR
Hackers have been exploiting a critical zero-day vulnerability in Microsoft SharePoint since July 7, 2025, targeting government and corporate sectors across North America and Europe. The attack involves deploying web shells to extract cryptographic keys, allowing persistent access and remote code execution. Microsoft has issued patches, but sophisticated variants of the vulnerability continue to be exploited, emphasizing the need for immediate security updates.
Topics:businesstechnology#cryptographic-keys#cybersecurity#exploitation#sharepoint#technology#zero-day
- Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access The Hacker News
- Global hack on Microsoft product hits U.S., state agencies, researchers say The Washington Post
- Microsoft Sharepoint ToolShell attacks linked to Chinese hackers BleepingComputer
- Why Microsoft Is Urging Security Updates for SharePoint Customers Barron's
- Agencies face tight deadline to mitigate SharePoint vulnerability Federal News Network
Want the full story? Read the original reporting
Read on The Hacker News