Critical Alert: Microsoft SharePoint Zero-Day Exploit Under Active Attack, Urgent Patches Issued
Critical Alert: Microsoft SharePoint Zero-Day Exploit Under Active Attack, Urgent Patches Issued Microsoft has issued an emergency fix to address a critical zero-day vulnerability (CVE-2025-49706) actively being exploited in its widely-used SharePoint server software. The flaw has enabled hackers to conduct widespread attacks on various businesses and some U.S. government agencies. The company confirmed it became aware of the exploit on Saturday, swiftly releasing initial guidance and patches on Sunday for SharePoint Server 2019 and SharePoint Server Subscription Edition. However,…