A recently uncovered vulnerability in Microsoft’s SharePoint server software is causing concern among the global business and cybersecurity sectors, with experts alerting that numerous organisations, including government bodies, energy companies, educational institutions, and businesses, could be vulnerable to major breaches.
The flaw, which has already been exploited by unknown hackers, allows attackers to gain extensive access to systems utilising on-premise SharePoint servers.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that the vulnerability permits hackers to reach internal file systems, configurations, and even execute harmful code remotely, effectively giving them high-level control over compromised servers.
Microsoft has acknowledged the breach and said that it has issued a new security update for customers to implement on their SharePoint servers “to mitigate active attacks on on-premises servers.” The company indicated it is working on deploying additional patches.
This incident highlights a critical issue for CIOs, CISOs, and IT managers worldwide, including those in Nigeria, many of whom continue to depend on on-premise Microsoft SharePoint for document management, internal communication, and enterprise collaboration.
This recent breach is simply the latest in a series of cybersecurity issues faced by Microsoft. In March, the company disclosed that Chinese state-sponsored hackers were focusing on cloud applications and remote management tools to penetrate U.S. and international organisations.