US EditionMicrosoft Issues Emergency Fix for Active SharePoint Zero-Day Exploit
UNITED STATES, JUL 23 – Over 85 servers in 29 organizations have been compromised as Chinese state-backed hackers exploit unpatched SharePoint flaws to gain full remote control, CISA and Microsoft warn.
- On Sunday, July 20, 2025, Microsoft Corp. issued an emergency security update for a SharePoint Server flaw, as attacks exploiting the zero-day threaten organizations worldwide.
- Despite July Patch Tuesday fixes, Microsoft disclosed two flawed patches that failed to address earlier issues, allowing attackers to bypass the update and uncover two zero-day vulnerabilities.
- Chaining CVE-2025-53770 and CVE-2025-53771 bypasses authentication to execute malicious code, with CVE-2025-53770 permitting unauthenticated remote code execution, while chaining it with CVE-2025-53771 bypasses authentication to execute malicious code.
- Following the exploit's discovery, researchers reported that two government-backed crews are exploiting the zero-days, and Eye Security researchers reported dozens of servers infected with ToolShell after spotting exploitation on July 18, 2025.
- Future threats could leverage these exploits against unpatched SharePoint servers, and CISA advises enabling AMSI, deploying Defender Antivirus and disconnecting servers until patches are applied.
Insights by Ground AI
Does this summary seem wrong?
211 Articles
211 Articles
Al ArabiyaReposted by 
Zawya
ZawyaMicrosoft server hack has compromised 400 organizations, researchers say
·Saudi Arabia
Read Full Article
Tally of Microsoft victims surges to 400 as hackers capitalize on SharePoint flaw
The number of companies and organizations compromised by a security vulnerability in Microsoft Corp.’s SharePoint servers is increasing rapidly, with the tally of victims soaring more than six-fold in a few days, according to one research firm.
·Toronto, Canada
Read Full Article
They increase the victims of the large-scale hacker attack by exploiting a vulnerability of SharePoint, to the web platform for collaboration, content management and the creation of Microsoft's corporate websites. The US group has attributed the action also to Chinese actors. Accused that it outraged Beijing. According to estimates of the Dutch security company Eye Security, hackers have violated the data of about 400 government agencies, compan…
·Rome, Italy
Read Full Article
Coverage Details
Total News Sources211
Leaning Left24Leaning Right15Center43Last UpdatedBias Distribution52% Center
Bias Distribution
- 52% of the sources are Center
52% Center
L 29%
C 52%
R 18%
Factuality
To view factuality data please Upgrade to Premium
