> TritonInfoSec News
Home / Jul 16, 2026 / Story
0
#3 BleepingComputer general July 15, 2026 at 09:44 UTC

CISA warns admins to patch actively exploited SharePoint flaws

By Sergiu Gatlan

AI Summary

CISA issued an urgent warning that attackers are actively exploiting three vulnerabilities in on-premises Microsoft SharePoint Server, two of which were targeted as zero-days before patches were available. The advisory coincides with Microsoft's July 2026 Patch Tuesday and Progress Software confirming a separate zero-day behind a ShareFile Storage Zones Controller disruption. Organizations running internet-exposed SharePoint instances should treat patching as an emergency priority.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 91.0/100

# More from July 16

  1. 1
    Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days BleepingComputer
  2. 2
    Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands The Hacker News
  3. 4
    Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday The Hacker News
  4. 5
    Microsoft’s Secure Boot has been broken for a decade and no one noticed until now Ars Technica Security
  5. 6
    US charges alleged operators of Russian bulletproof hosting service BleepingComputer
  6. 7
    Microsoft Patches a Record 570 Security Flaws Krebs on Security
  7. 8
    New phishing kits target Microsoft 365 accounts, evade MFA BleepingComputer
  8. 9
    Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News
  9. 10
    23andMe reaches $18 million settlement with states for massive breach The Record