Microsoft Warns of Active Zero-Day SharePoint Exploit Affecting 75+ Companies
TL;DR
Microsoft SharePoint servers are currently under a widespread attack exploiting a critical vulnerability (CVE-2025-53770) with no available patch, allowing attackers to gain control without authentication, potentially leading to data theft and lateral movement across networks. Microsoft is working on a fix, and users are advised to implement mitigations such as enabling antimalware and disconnecting servers from the internet if possible.
Topics:top-newstechnology#cve-2025-53770#mass-attack#microsoft#security-vulnerability#sharepoint#technology
- Microsoft Confirms Ongoing Mass SharePoint Attack — No Patch Available Forbes
- Global hack on Microsoft product hits U.S., state agencies, researchers say The Washington Post
- Microsoft alerts businesses, governments to server software attack Reuters
- Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers The Hacker News
- Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) Help Net Security
Want the full story? Read the original reporting
Read on Forbes