A 0-day flaw in Microsoft SharePoint is being exploited in RCE attacks on servers globally; no patch exists and tens of thousands of servers are at risk

A 0-day flaw in Microsoft SharePoint is being exploited in RCE attacks on servers globally; no patch exists and tens of thousands of servers are at risk (research.eye.security)
from Pro@programming.dev to cybersecurity@infosec.pub on 20 Jul 22:30
https://programming.dev/post/34252552

Microsoft Guidance.

#cybersecurity

threaded - newest

homesweethomeMrL@lemmy.world on 21 Jul 00:01 next collapse

First time ever that’s happened.

. . . right?

Zorsith@lemmy.blahaj.zone on 21 Jul 01:42 collapse

Sharepoint is in fuckin everything now so this is probably gonna be a fun one.

wizardbeard@lemmy.dbzer0.com on 21 Jul 12:28 collapse

These CVEs are only for On-Prem Sharepoint. Not Office/Microsoft 365 Sharepoint, which is the cloud based one integrated into Teams, underlying behind Onedrive, etc.

So not as chaotic or wide reaching as you might be thinking.

omgboom@lemmy.dbzer0.com on 21 Jul 02:17 collapse

That’s a normal Tuesday for Microsoft these days