Microsoft warns of active zero-day exploitation (CVE-2025-53770, CVSS 9.8) in on-premises SharePoint Server. No patch is available, but mitigations are provided.
SharePoint Server
Microsoft is increasing prices for on-premises server products by 10% and CAL Suites by up to 20% starting July/August 2025, pushing enterprises towards cloud subscriptions.
Microsoft integrates AMSI with Exchange and SharePoint Server to enhance security against attacks like SSRF and web shell deployment, protecting against sophisticated threats.
Explore the latest on-premises server products and the upcoming price increase announced by Microsoft for 2025.
A security researcher has published a proof-of-concept (PoC) exploit code targeting a recent important severity vulnerability (CVE-2024-30043)
CVE-2023-24955 has joined CISA's Known Exploited Vulnerabilities catalog, signaling both the severity & increased risk of widespread attacks