Archive — US — techcrunch
New zero-day bug in Microsoft SharePoint under widespread attack
A new zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53771, is under widespread attack, affecting numerous organizations including U.S. federal agencies. Cybersecurity agency CISA has warned that hackers can exploit this flaw to access sensitive data. Microsoft is working on patches, but until then, organizations are advised to disconnect affected systems and rotate their security keys.
Key points
- CVE-2025-53771 is a zero-day vulnerability in Microsoft SharePoint.
- The bug affects self-hosted SharePoint versions as old as 2016.
- CISA warned that hackers are actively exploiting this vulnerability.
- Remote access through the bug allows hackers to steal digital keys and deploy malware.
- Widespread impact includes U.S. federal agencies, universities, and energy firms.
- Customers are advised to disconnect affected systems from the internet and rotate digital keys.
- Previous high-profile attacks on Microsoft products highlight ongoing cybersecurity risk.
Why it matters
- This incident bears similarities to previous attacks such as the 2021 Hafnium incident, which targeted Microsoft Exchange.
- The trend of increased cybersecurity threats exposes vulnerabilities within major tech company infrastructures.
- Ongoing global tensions have heightened cyber espionage, particularly from state-sponsored actors.
The discovery of this SharePoint vulnerability underscores the critical need for prompt software updates and heightened cybersecurity measures to protect sensitive information from ongoing threats.