Microsoft Warns of Active Cyberattacks Targeting SharePoint, Thousands of US Government Servers at Risk.

Microsoft has issued a security alert for its SharePoint server software, warning of active cyberattacks targeting US government agencies and businesses. The vulnerability allows attackers to spoof network activity, access sensitive information, and may affect tens of thousands of servers. The FBI is working with Microsoft to assess the threat. Microsoft shares have climbed 21.85% year-to-date.

Microsoft Corporation (MSFT) has issued a critical security alert regarding active cyberattacks targeting its SharePoint server software used by U.S. government agencies and businesses for internal document sharing. The alert warns that a previously unknown vulnerability, allowing attackers to spoof network activity and access sensitive information, has been exploited. The FBI is actively working with Microsoft to assess the threat, which may affect tens of thousands of servers.

The vulnerabilities specifically impact on-premises SharePoint servers within organizations, while SharePoint Online in Microsoft 365, which is cloud-based, remains unaffected. Microsoft has released a security update for SharePoint Subscription Edition and recommends that customers apply the update immediately. Users are advised to disconnect their servers from the internet if they cannot enable recommended malware protection until a security update is available.

Microsoft's alert comes amid growing concerns about cybersecurity threats, particularly in the wake of recent high-profile attacks. The company's stock has climbed 21.85% year-to-date, reflecting investor confidence in its ability to navigate and mitigate such security challenges.

References:
[1] https://www.reuters.com/sustainability/boards-policy-regulation/microsoft-alerts-businesses-governments-server-software-attack-2025-07-21/
[2] https://www.benzinga.com/markets/tech/25/07/46512850/microsoft-sounds-alarm-on-active-cyberattacks-targeting-sharepoint-thousands-of-us-government-servers-may-be-at-risk
[3] https://stocktwits.com/news-articles/markets/cryptocurrency/microsoft-hit-with-active-cyberattacks-on-servers-at-customer-sites-impacting-government-agencies-businesses/ch8AbF9R5Ak
[4] https://www.business-standard.com/technology/tech-news/microsoft-warns-govt-firms-of-cyberattacks-on-document-sharing-software-125072100081_1.html