Microsoft SharePoint Zero-Day Bug Under Attack: What You Must Know
A zero-day flaw in Microsoft SharePoint is being actively exploited. Learn how the attack works and what steps to take now.
Matilda
Microsoft SharePoint Zero-Day Bug Under Attack: What You Must Know Microsoft SharePoint Zero-Day Vulnerability: What’s Happening Right Now A critical Microsoft SharePoint zero-day vulnerability is under active attack, prompting urgent alerts from cybersecurity agencies and experts. This newly discovered flaw, identified as CVE-2025-53770, affects multiple versions of SharePoint Server—especially those self-hosted by organizations. With no immediate patches available for all affected systems, businesses are scrambling to defend themselves as hackers exploit the bug to steal private digital keys and deploy malware. The situation has already impacted U.S. federal agencies, energy companies, and universities, making it a widespread and high-stakes cyberthreat. If your organization uses on-premise SharePoint, understanding the threat and your response options is crucial. Image Credits:Nicolas Economou / NurPhot / Getty Images How the Microsoft SharePoint Zero-Day Vulnerability Works The vulnerability is particularly dangerous because it allows attackers to by…