This is getting a lot of attention in the news cycle and it seems to be pretty significant for some customers. <\/p>\n\n\n\n
Microsoft has disclosed several critical vulnerabilities affecting on-premises SharePoint Server<\/strong> environments. These flaws are being actively exploited by advanced threat actors to gain unauthorized access, execute remote code, and bypass security controls.<\/p>\n\n\n\n Note:<\/strong> SharePoint Online (Microsoft 365) is not impacted.<\/p>\n<\/blockquote>\n\n\n\n The most critical issue, CVE-2025-53770<\/strong>, allows attackers to exploit ASP.NET machine key configurations to impersonate users and execute arbitrary code. Additional vulnerabilities include:<\/p>\n\n\n\n These vulnerabilities are being used in multi-stage attacks that begin with SharePoint exploitation and escalate to broader network compromise.<\/p>\n\n\n\n Zero Trust Exploits (ZTEs)<\/strong> refer to vulnerabilities or attack techniques that undermine the principles of a Zero Trust Architecture<\/strong>\u2014a security model that assumes no implicit trust, even within the network perimeter. In this case, attackers are exploiting SharePoint to gain initial access and then move laterally, bypassing identity and access controls that Zero Trust is designed to enforce.<\/p>\n\n\n\n While the vulnerabilities themselves are not exclusive to Zero Trust environments, their exploitation highlights gaps in enforcement and monitoring that Zero Trust strategies aim to mitigate.<\/p>\n\n\n\n To protect your environment, Microsoft recommends the following steps:<\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" This is getting a lot of attention in the news cycle and it seems to be pretty significant for some customers. Summary Microsoft has disclosed several critical vulnerabilities affecting on-premises SharePoint Server environments. These flaws are being actively exploited by advanced threat actors to gain unauthorized access, execute remote code, and bypass security controls. Affected…<\/p>\n","protected":false},"author":2,"featured_media":368574,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","episode_type":"","audio_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","itunes_episode_number":"","itunes_title":"","itunes_season_number":"","itunes_episode_type":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[681,441],"tags":[836,742,920,764],"class_list":["post-519025","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-moderneuc2","category-tech-talk","tag-cyberattacks","tag-moderneuc1","tag-security-breaches","tag-sharepoint"],"taxonomy_info":{"category":[{"value":681,"label":"ModernEUC"},{"value":441,"label":"Tech Talk"}],"post_tag":[{"value":836,"label":"cyberattacks"},{"value":742,"label":"ModernEUC"},{"value":920,"label":"Security Breaches"},{"value":764,"label":"Sharepoint"}]},"featured_image_src_large":["https:\/\/jorgep.com\/blog\/wp-content\/uploads\/CyberSecurity-FeaturedImage2-730x430-1.jpg",730,430,false],"author_info":{"display_name":"Jorge Pereira","author_link":"https:\/\/jorgep.com\/blog\/author\/jorge\/"},"comment_info":0,"category_info":[{"term_id":681,"name":"ModernEUC","slug":"moderneuc2","term_group":0,"term_taxonomy_id":691,"taxonomy":"category","description":"","parent":0,"count":261,"filter":"raw","cat_ID":681,"category_count":261,"category_description":"","cat_name":"ModernEUC","category_nicename":"moderneuc2","category_parent":0},{"term_id":441,"name":"Tech Talk","slug":"tech-talk","term_group":0,"term_taxonomy_id":451,"taxonomy":"category","description":"","parent":0,"count":670,"filter":"raw","cat_ID":441,"category_count":670,"category_description":"","cat_name":"Tech Talk","category_nicename":"tech-talk","category_parent":0}],"tag_info":[{"term_id":836,"name":"cyberattacks","slug":"cyberattacks","term_group":0,"term_taxonomy_id":846,"taxonomy":"post_tag","description":"","parent":0,"count":4,"filter":"raw"},{"term_id":742,"name":"ModernEUC","slug":"moderneuc1","term_group":0,"term_taxonomy_id":752,"taxonomy":"post_tag","description":"","parent":0,"count":284,"filter":"raw"},{"term_id":920,"name":"Security Breaches","slug":"security-breaches","term_group":0,"term_taxonomy_id":930,"taxonomy":"post_tag","description":"","parent":0,"count":4,"filter":"raw"},{"term_id":764,"name":"Sharepoint","slug":"sharepoint","term_group":0,"term_taxonomy_id":774,"taxonomy":"post_tag","description":"","parent":0,"count":3,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/519025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/comments?post=519025"}],"version-history":[{"count":1,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/519025\/revisions"}],"predecessor-version":[{"id":519026,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/posts\/519025\/revisions\/519026"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media\/368574"}],"wp:attachment":[{"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/media?parent=519025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/categories?post=519025"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jorgep.com\/blog\/wp-json\/wp\/v2\/tags?post=519025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Affected Versions<\/h2>\n\n\n\n
\n
\n
Vulnerability Overview<\/h2>\n\n\n\n
\n
What Is a ZTE?<\/h2>\n\n\n\n
Recommended Actions<\/h2>\n\n\n\n
\n
Microsoft References<\/h2>\n\n\n\n
\n