Microsoft Under Fire After Major SharePoint Security Breach

0

While Microsoft has issued security updates for affected SharePoint versions, an older 2016 version remains vulnerable as the company works to develop a patch. Cybersecurity experts at Palo Alto Networks estimated this breach potentially affects thousands of organisations worldwide, highlighting the real and immediate threat posed by these exploits.

The vulnerability is of particular concern as it allows hackers to impersonate users even after patches are applied, according to researchers at Eye Security, a European cybersecurity firm responsible for identifying the flaw. This breach significantly impacts organisations relying on SharePoint for document storage and collaboration.

This security breach raises grave concerns for businesses and governmental bodies relying on SharePoint. The capability to impersonate users and integrate with other Microsoft services such as Outlook and Teams exacerbates the risk, leading to potential data theft, password compromises, and further infiltrations. Eye Security researchers warn that breaches of this nature can escalate rapidly to data exfiltration, deployment of backdoors, and theft of cryptographic keys, presenting a long-term cybersecurity threat to organisations.

The incident underscores the necessity for organisations to remain vigilant and promptly apply available security updates to safeguard their systems. As threats evolve, maintaining robust cybersecurity measures is crucial to mitigating risks and protecting sensitive data from malicious attacks.

Microsoft is actively working to address the vulnerabilities and develop solutions for affected versions of SharePoint. Organisations using on-premises SharePoint servers are urged to install the security updates provided by Microsoft to enhance their defences against such threats.

Meanwhile, cybersecurity experts emphasise the importance of comprehensive security strategies, including regular system updates and employee awareness training, to combat sophisticated cyberattacks. As incidents like this highlight ongoing cybersecurity challenges, maintaining proactive measures and collaboration with security researchers will be vital for organisations to safeguard their digital assets and protect against future threats.

Published:Tuesday, 22nd Jul 2025
Source: Paige Estritori

Share this news item:

Insurance News

Clear

Microsoft Under Fire After Major SharePoint Security Breach 22 Jul 2025: Paige Estritori Microsoft is grappling with an alarming security breach affecting its SharePoint collaboration software, impacting organisations and government entities globally. The Cybersecurity and Infrastructure Security Agency (CISA) recently unveiled the vulnerability, warning that it permits unauthorised access to systems and complete access to SharePoint content, enabling malicious actors to execute code across networks. - read more

Insurers Urged to Ensure Fairness Before Stopping Payouts 22 Jul 2025: Paige Estritori The Australian Financial Complaints Authority (AFCA) has highlighted the importance of procedural fairness in a ruling against TAL, a major life insurer. The directive stresses that insurers must allow customers an opportunity to respond before ceasing their benefits. This ruling came after TAL halted payments under an income protection policy from May 2023 to February 2024, issuing a procedural fairness letter only in June last year, months after payments ceased. - read more

Tasmanian Liberals Propose State-Backed Insurance Amid Criticism 21 Jul 2025: Paige Estritori The Tasmanian Liberal Party, under Premier Jeremy Rockliff, is advocating for a state-backed general insurer—TasInsure—should they win the upcoming state election on July 19. This initiative aims to mitigate rising insurance premiums allegedly caused by the national market's failures. However, the plan has been met with strong opposition from private insurers and critics who question its viability. - read more

AFCA Sides with Policyholder in Storm Damage Dispute 18 Jul 2025: Paige Estritori A recent ruling by the Australian Financial Complaints Authority (AFCA) has favoured a policyholder in a dispute with insurer Auto & General over storm damage. The case involved a collapsed ceiling, initially attributed to a storm by the insurer before an about-face led them to deny the claim. The AFCA decision marks a significant instance where consumer protection mechanisms have countered an insurer's attempt to deny coverage. - read more

Transforming Home Insurance: The Rise of the Home Energy Revolution 17 Jul 2025: Paige Estritori The landscape of home insurance policies in Australia stands on the brink of transformation as an increasing number of homes, apartment complexes, and small businesses are projected to integrate solar panels and battery systems by 2050. According to a report from the actuarial consultancy Finity, these homes will evolve into independent power stations, generating and storing their own electricity, marking a pivotal shift in home energy management. - read more