Microsoft Leaves Tens of Thousands of SharePoint Servers Vulnerable Amid Active Exploits

Tens of thousands of SharePoint servers worldwide are at risk of cyberattacks due to a critical vulnerability that Microsoft has not yet patched. The flaw has been exploited by hackers targeting government agencies, universities, energy companies, and businesses globally. The breach has led to sensitive data theft and potential password harvesting. Despite the severity of the threat, Microsoft has not provided a patch and has only advised users to modify SharePoint server settings or disconnect them from the internet. Researchers report ongoing global attacks, including incidents involving U.S. federal agencies, European government bodies, and companies across Asia. The attackers are believed to be using an earlier security flaw as a gateway for further exploitation. This situation is especially concerning because compromised servers may allow hackers to maintain access even after a patch is issued. As more organizations report breaches, cybersecurity experts are warning that those already compromised may face long-term security challenges. The breach raises concerns about the cybersecurity preparedness of vital infrastructure and the need for urgent action to secure vulnerable servers.