logo

Microsoft SharePoint Zero-Day

ID: 16ead6a7-b46d-5211-8430-2aba7625e6c5

STIX ID: report--16ead6a7-b46d-5211-8430-2aba7625e6c5

Feed Name: Schneier on Security

Threat Score
90/100

Date Published: 2025-07-28

Date Updated: 2026-04-19

Author: Bruce Schneier

...
...

A critical Microsoft SharePoint zero-day (CVE-2025-53770, CVSS 9.8) is being actively exploited worldwide by Chinese-linked attackers to gain unauthenticated remote access to on-premises SharePoint servers and exfiltrate authentication credentials and data; Microsoft, CISA and security vendors have published patches and guidance, but active exploitation and credential theft make this an ongoing high-impact incident.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.