SharePoint, vulnerability and active exploitation
Digest more
Microsoft, SharePoint
Digest more
CISA gave agencies until the end of the day on Monday to mitigate a severe zero-day vulnerability in Microsoft's widely used SharePoint software.
State CISOs in North Carolina and Arizona said their teams began work immediately to ensure on-prem SharePoint systems were secure, following the recent disclosure of an active zero-day exploit.
Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.
Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”