Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack

Infosec In Brief: Microsoft and CISA warn of active exploitation of a critical SharePoint Server zero‑day (CVE-2025-53770, CVSS 9.8) with published IOCs (IPs and POST path) and interim mitigations; additionally, Lookout reports Chinese-installed mobile surveillance malware capable of extracting data from visitors' phones, and the EFF warns Ring is restoring law‑enforcement access to devices—together these items raise immediate enterprise and traveler security concerns.