US EditionMicrosoft alerts businesses, governments to server software attack
UNITED STATES, JUL 21 – The flaw allows attackers to bypass authentication and evade multi-factor protections, with at least 85 servers breached across 29 organizations, officials said.
- Microsoft alerted businesses and some federal agencies on July 20 about widespread attacks exploiting a zero-day vulnerability in SharePoint server software.
- The vulnerability, tracked as CVE-2025-53770 and introduced while fixing earlier bugs CVE-2025-49706 and CVE-2025-49704, has been actively exploited since July 18 in waves.
- The exploit, reportedly called ToolShell, allows attackers full access to SharePoint file systems and connected services like Teams and OneDrive, affecting multiple on-premise SharePoint variants.
- Eye Security scanned over 8,000 servers worldwide, finding dozens compromised, while CISA warned impacts may be widespread and urged disconnecting affected servers until patched.
- Microsoft has issued an urgent patch along with updated instructions for SharePoint Server 2019 and the Subscription Edition, while their team continues to develop a solution for SharePoint Server 2016, indicating that some risk remains.
402 Articles
402 Articles
Telecom, government agencies among those targeted by hackers due to Microsoft glitch
(Stock image via Pixabay) Microsoft is warning businesses about a previously-unknown security issue that has been exploited by cyber criminals against businesses and government agencies around the world for the past few weeks. The issue involves SharePoint, software that is widely used to run and manage servers operating Microsoft Windows. The so-called “zero-day” exploit — a term referring to a security flaw unknown to the software maker and th…
A major security vulnerability has been discovered in Microsoft's SharePoint software, server software used by many organizations and companies to share documents. The vulnerability allows attackers to gain full control of the affected servers.
SharePoint vulnerability with 9.8 severity rating under exploit across globe
Authorities and researchers are sounding the alarm over the active mass exploitation of a high-severity vulnerability in Microsoft SharePoint Server that’s allowing attackers to make off with sensitive company data, including authentication tokens used to access systems inside networks. Researchers said anyone running an on-premises instance of SharePoint should assume their networks are breached. The vulnerability, tracked as CVE-2025-53770, ca…
Coverage Details
Bias Distribution
- 64% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
