Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers
A critical security vulnerability in Microsoft SharePoint Server
has been weaponized as part of an "active, large-scale"
exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770
(CVSS score: 9.8), has been described as a variant of
CVE-2025-49706 (CVSS score: 6.3), a spoofing bug in Microsoft
SharePoint Server that was addressed by the tech giant as part of
its July 2025 Patch Tuesday
Read more https://thehackernews.com/2025/07/critical-microsoft-sharepoint-flaw.html