Get the latest tech news
New zero-day bug in Microsoft SharePoint under widespread attack
Security researchers say Microsoft customers should take immediate action to defend against the ongoing cyberattacks, and must assume they have already been compromised.
Microsoft has not yet provided patches for all affected SharePoint versions, leaving customers across the world largely unable to defend against the ongoing intrusions. Eye Security, which first revealed the bug on Saturday, said it found “dozens” of actively exploited Microsoft SharePoint servers online at the time of its publication. “If you have SharePoint [on-premise] exposed to the internet, you should assume that you have been compromised at this point,” said Michael Sikorski, the head of Palo Alto Networks’ threat intelligence division Unit 42, in an email to TechCrunch.
Or read this on TechCrunch