The NCSC has issued an alert for Microsoft SharePoint Server. A security vulnerability allows malicious parties to execute unauthorized code.
Microsoft has now made information available about the actively exploited Zero Day vulnerability in on-premises Microsoft SharePoint Server. SharePoint Online (Microsoft 365) has not been compromised.
Recently, the Prosecutor's Office was in the news because of a security vulnerability in Citrix NetScaler ADC and Gateway. The NCSC points out that these are different vulnerabilities that are not interconnected.
According to US newspaper The Washington Post, US federal agencies, universities, energy companies and an Asian telecom company have been hacked. According to security firm Censys, more than 10,000 companies with SharePoint servers are at risk. The United States has the most companies with these servers, followed by the Netherlands.
Microsoft has made available a new security update "to counter active attacks on local servers." The NCSC strongly recommends that organizations install these security updates as soon as possible. Microsoft has published guidance on how to do this.
Click here for Microsoft's advice.
Click here for the NCSC's message.
