SharePoint Zero-Day Hack Hits 400+ Organizations Globally

Over 400 organizations breached via a SharePoint zero-day vulnerability. Learn what happened, who’s affected, and how to stay protected.
Matilda
SharePoint Zero-Day Hack Hits 400+ Organizations Globally
SharePoint Zero-Day Vulnerability Affects Hundreds of Organizations A critical SharePoint zero-day vulnerability has led to the breach of over 400 organizations, sparking widespread concerns in the cybersecurity community. The bug, identified as CVE-2025-53770, targets self-hosted SharePoint servers and allows hackers to remotely execute malicious code, giving them deep access to company files and internal networks. Security experts say the exploit has been active since early July, and high-profile victims include U.S. government agencies such as the National Nuclear Security Administration. This rapid escalation underscores how dangerous unpatched vulnerabilities in enterprise software can become—and why immediate mitigation is crucial for any business running on-premises SharePoint servers. Image Credits:David Ryder / Bloomberg (PhotoMosh/modified) / Getty Images What Is the SharePoint Zero-Day Vulnerability (CVE-2025-53770)? At the core of this massive breach is a zero-day flaw in Micr…