cybersecurity

4733 readers

39 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 2 years ago

MODERATORS

shellsharks

tweedge

A 0-day flaw in Microsoft SharePoint is being exploited in RCE attacks on servers globally; no patch exists and tens of thousands of servers are at risk (research.eye.security)

submitted 2 weeks ago* (last edited 2 weeks ago) by Pro@programming.dev to c/cybersecurity

4 comments fedilink hide all child comments

Microsoft Guidance.

top 4 comments

sorted by: hot top controversial new old

[–] homesweethomeMrL@lemmy.world 7 points 2 weeks ago (1 children)

First time ever that’s happened.

. . . right?

[–] Zorsith@lemmy.blahaj.zone 5 points 2 weeks ago (1 children)

Sharepoint is in fuckin everything now so this is probably gonna be a fun one.

[–] wizardbeard@lemmy.dbzer0.com 6 points 2 weeks ago

These CVEs are only for On-Prem Sharepoint. Not Office/Microsoft 365 Sharepoint, which is the cloud based one integrated into Teams, underlying behind Onedrive, etc.

So not as chaotic or wide reaching as you might be thinking.

[–] omgboom@lemmy.dbzer0.com 2 points 2 weeks ago

That's a normal Tuesday for Microsoft these days