Microsoft issues alert on SharePoint Server attacks

Microsoft has issued an urgent security alert over active cyberattacks targeting SharePoint server software used by businesses and government agencies for document sharing, warning customers to apply updates immediately to mitigate the threat.
According to Microsoft, the vulnerability affects on-premise SharePoint servers and does not impact SharePoint Online in Microsoft 365. The company confirmed that it has released a security update for SharePoint Subscription Edition and is developing fixes for SharePoint 2016 and 2019 versions.According to information,the attack, first reported by The Washington Post, is a “zero-day” exploit, meaning hackers leveraged an undisclosed flaw to infiltrate systems. Experts warn that tens of thousands of servers worldwide could be at risk.
Microsoft described the flaw as enabling spoofing attacks, where attackers impersonate trusted users or organizations to manipulate systems, potentially causing financial or operational disruptions.The FBI acknowledged awareness of the attacks and said it is working with federal agencies and private-sector partners, without offering further details. Microsoft advised that organizations unable to implement the recommended protections should disconnect servers from the internet until updates are applied,according to information.