Microsoft has released an emergency security update to address a critical zero-day vulnerability in its SharePoint Server platform, following reports that the flaw is being actively exploited by hackers to infiltrate government, academic, and energy-sector systems across the U.S. and abroad.

The vulnerability, now identified as CVE-2025-53770, affects on-premises SharePoint servers and is not present in Microsoft 365 or SharePoint Online. According to Microsoft’s advisory, the flaw is a variation of a previously patched issue, CVE-2025-49706, which was believed to have been fixed in the company’s July 8 update. However, new exploitation techniques have rendered that patch incomplete. Continue reading Microsoft Issues Emergency Patch as SharePoint Vulnerability Leads to High-Profile Breaches →