Periodical
Microsoft SharePoint under attack via new exploit.
| Title: | Microsoft SharePoint under attack via new exploit. |
|---|---|
| Authors: | Jones, David (AUTHOR) |
| Source: | Cybersecurity Dive. 7/21/2026, pN.PAG-N.PAG. 1p. |
| Subject Terms: | *SharePoint (Computer software), *Computer security vulnerabilities, Internet security, Software upgrades |
| Company/Entity: | Microsoft Corp. 081466849 MSFT |
| Abstract: | The article focuses on a critical deserialization vulnerability in Microsoft SharePoint, identified as CVE-2026-50522, which is actively being exploited to enable remote code execution with a severity rating of 9.8 out of 10. Security researchers from watchTowr and Defused report that attackers are targeting on-premises SharePoint servers, stealing machine keys to maintain persistent access, and warn that patching alone is insufficient without rotating exposed credentials. Microsoft has released security updates to mitigate the flaw and recommends upgrading to the latest version, while the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to address it promptly. The article also notes recent CISA warnings about additional SharePoint vulnerabilities facing exploitation. [Extracted from the article] |
| Copyright of Cybersecurity Dive is the property of Industry Dive and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Business Source Index |
| FullText | Text: Availability: 0 |
|---|---|
| Header | DbId: bsx DbLabel: Business Source Index An: 195618563 RelevancyScore: 1272 AccessLevel: 6 PubType: Periodical PubTypeId: serialPeriodical PreciseRelevancyScore: 1271.61413574219 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: Microsoft SharePoint under attack via new exploit. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Jones%2C+David%22">Jones, David</searchLink> (AUTHOR) – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22Cybersecurity+Dive%22">Cybersecurity Dive</searchLink>. 7/21/2026, pN.PAG-N.PAG. 1p. – Name: Subject Label: Subject Terms Group: Su Data: *<searchLink fieldCode="DE" term="%22SharePoint+%28Computer+software%29%22">SharePoint (Computer software)</searchLink><br />*<searchLink fieldCode="DE" term="%22Computer+security+vulnerabilities%22">Computer security vulnerabilities</searchLink><br /><searchLink fieldCode="DE" term="%22Internet+security%22">Internet security</searchLink><br /><searchLink fieldCode="DE" term="%22Software+upgrades%22">Software upgrades</searchLink> – Name: SubjectCompany Label: Company/Entity Group: Su Data: <searchLink fieldCode="DE" term="%22Microsoft+Corp%2E%22">Microsoft Corp.</searchLink> <searchLink fieldCode="DN" term="%22081466849%22">081466849</searchLink> <searchLink fieldCode="TK" term="%22MSFT%22">MSFT</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: The article focuses on a critical deserialization vulnerability in Microsoft SharePoint, identified as CVE-2026-50522, which is actively being exploited to enable remote code execution with a severity rating of 9.8 out of 10. Security researchers from watchTowr and Defused report that attackers are targeting on-premises SharePoint servers, stealing machine keys to maintain persistent access, and warn that patching alone is insufficient without rotating exposed credentials. Microsoft has released security updates to mitigate the flaw and recommends upgrading to the latest version, while the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to address it promptly. The article also notes recent CISA warnings about additional SharePoint vulnerabilities facing exploitation. [Extracted from the article] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of Cybersecurity Dive is the property of Industry Dive and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=bsx&AN=195618563 |
| RecordInfo | BibRecord: BibEntity: Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 1 StartPage: N.PAG Subjects: – SubjectFull: SharePoint (Computer software) Type: general – SubjectFull: Computer security vulnerabilities Type: general – SubjectFull: Internet security Type: general – SubjectFull: Software upgrades Type: general – SubjectFull: Microsoft Corp. Type: general Titles: – TitleFull: Microsoft SharePoint under attack via new exploit. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Jones, David IsPartOfRelationships: – BibEntity: Dates: – D: 21 M: 07 Text: 7/21/2026 Type: published Y: 2026 Titles: – TitleFull: Cybersecurity Dive Type: main |
| ResultId | 1 |