Microsoft alerts businesses, governments to server software attack

Microsoft has alerted users of active attacks on SharePoint server software used by government and businesses. The FBI is aware and collaborating with partners but lacks further details.

SharePoint Online users in Microsoft 365 are unaffected. The Washington Post reported that a zero-day flaw has been exploited in recent days, risking tens of thousands of servers.

Microsoft stated a vulnerability "allows an authorized attacker to perform spoofing over a network." Immediate security updates for SharePoint Subscription Edition are recommended. Updates for versions 2016 and 2019 are in progress. Customers should disconnect servers from the internet if they can't ensure malware protection.