Microsoft's Urgent Patch for SharePoint Vulnerability

Microsoft has released an emergency fix for a vulnerability in SharePoint software that hackers have exploited in attacks on businesses and federal agencies. The company alerted customers and is developing patches, while CISA warns of widespread impact and advises affected servers be disconnected until secured.

Microsoft has swiftly addressed a critical security flaw in its SharePoint software, issuing an emergency patch to thwart cyberattack exploitation by hackers targeting businesses and federal agencies.

The tech giant announced on Saturday that it discovered a zero-day exploit, prompting it to work diligently on a fix, which it provided guidance for on Sunday. The fix is currently available for SharePoint Server 2019 and SharePoint Server Subscription Edition, with efforts underway for a solution for older versions like SharePoint Server 2016.

In response to the potential threat, the US Cybersecurity and Infrastructure Security Agency (CISA) has emphasized the vulnerability's risks, suggesting compromised servers be disconnected until remedied, as security experts continue to assess the attack's scope.

(With inputs from agencies.)