Overview

• Emergency security updates for SharePoint Subscription Edition and 2019 have been released while patches for the 2016 version remain under development
• The exploited zero-day flaw allows attackers to spoof network communications, bypass multi-factor authentication and execute remote code
• Microsoft is coordinating with CISA, the FBI and private cybersecurity firms to investigate attacker tactics and remediate affected systems
• Tens of thousands of on-premises SharePoint servers worldwide still face compromise risk without timely application of available patches
• Organizations are urged to enable malware protection or disconnect vulnerable servers from the internet until full fixes are applied