Fresh SharePoint Vulnerability Exploited Soon After Disclosure

By Ionut Arghire

AI Summary

A critical-severity SharePoint vulnerability allowing remote authenticated attackers to execute arbitrary code is already being actively exploited in the wild shortly after public disclosure. Organizations running on-premises SharePoint should treat this as an emergency patch, as authenticated RCE in SharePoint has historically been a high-value target for ransomware operators and nation-state actors.

Read full article → https://www.securityweek.com/fresh-sharepoint-vuln…

Relevance score: 84.0/100

# More from July 19

1
WordPress Core "wp2shell" RCE flaws get public exploits, patch now BleepingComputer
2
Update now: 7-Zip fixes RCE flaw exploitable with malicious archives BleepingComputer
4
Leading members of Scattered Spider sentenced in UK to 66 months in jail CyberScoop
5
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload BleepingComputer
6
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files The Hacker News
7
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT The Hacker News
8
Ernst & Young discloses data breach after support system hack BleepingComputer
9
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage The Hacker News
10
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man The Hacker News