Microsoft, SharePoint and cyber
Digest more
Microsoft recently patched two major flaws in SharePoint on-prem instances, but the effects could be long-lasting.
Multiple hacking groups—including state actors from China—have targeted a vulnerability in older, on-premises versions of the file-sharing tool after a flawed attempt to patch it.
The vulnerability also could allow hackers to access services connected to SharePoint, including OneDrive and Teams.
To secure the endpoints, Microsoft recommends applying the July 2025 security updates immediately, as well as enabling Antimalware Scan Interface (AMSI) for SharePoint and making sure Defender Antivirus is deployed.