Microsoft SharePoint Attacks Show Weaknesses of On-Prem Storage vs. Cloud

Microsoft SharePoint Attacks Show Weaknesses of On-Prem Storage vs. Cloud

Is your data safe anywhere?  In the past week, more victims have emerged from the attack on Microsoft’s SharePoint servers in which a Chinese hacking group called Storm-2603 exploited a vulnerability to deploy ransomware on clients running SharePoint from on-premise networks, rather than those hosted by the tech giant. While many companies maintain on-premise networks and servers, believing that they are more secure than the cloud, increasingly …

SharePoint Servers Under Siege as Dual Zero‑Days Fuel Ransomware Surge

A rapidly escalating wave of cyberattacks is targeting unpatched on‑premises SharePoint servers worldwide, exploiting two newly discovered critical vulnerabilities—CVE‑2025‑53770 (CVSS 9.8) and CVE‑2025‑47981. Security analysts at Recast Software warn that initial espionage‑driven campaigns have evolved into aggressive ransomware operations, and the U.S. federal government is among those affected.Microsoft and CISA confirm that CVE‑2025‑53770 al…

CrowdStrike Detects and Blocks Initial SharePoint Zero-Day Exploitation

Falcon Exposure Management has had detections for all supported platforms since the vulnerability was initially disclosed. The vulnerability currently has an ExPRT.AI severity rating of “Critical,” with an exploit status of “Actively Used (Critical)” due to confirmed active exploitation in the wild. To identify vulnerable systems, customers can navigate to the Exposure Management > Vulnerability Management > Vulnerabilities page in the CrowdStri…

Microsoft SharePoint Zero-Day - Schneier on Security

Chinese hackers are exploiting a high-severity vulnerability in Microsoft SharePoint to steal data worldwide: The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated remote access to SharePoint Servers exposed to the Internet. Starting Friday, researchers began warning of active exploitation of the vulnerability, which affects SharePoint Servers that infrastructure customers r…