Periodical
Microsoft SharePoint under attack via new exploit.
| Τίτλος: | Microsoft SharePoint under attack via new exploit. |
|---|---|
| Συγγραφείς: | Jones, David (AUTHOR) |
| Πηγή: | Cybersecurity Dive. 7/21/2026, pN.PAG-N.PAG. 1p. |
| Θεματικοί όροι: | *SharePoint (Computer software), *Computer security vulnerabilities, Internet security, Software upgrades |
| Εταιρία/Οντότητα: | Microsoft Corp. 081466849 MSFT |
| Περίληψη: | The article focuses on a critical deserialization vulnerability in Microsoft SharePoint, identified as CVE-2026-50522, which is actively being exploited to enable remote code execution with a severity rating of 9.8 out of 10. Security researchers from watchTowr and Defused report that attackers are targeting on-premises SharePoint servers, stealing machine keys to maintain persistent access, and warn that patching alone is insufficient without rotating exposed credentials. Microsoft has released security updates to mitigate the flaw and recommends upgrading to the latest version, while the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to address it promptly. The article also notes recent CISA warnings about additional SharePoint vulnerabilities facing exploitation. [Extracted from the article] |
| Copyright of Cybersecurity Dive is the property of Industry Dive and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Βάση Δεδομένων: | Business Source Index |
καταχωρήστε σχόλιο πρώτοι!