Microsoft SharePoint attack: Officials issue warning about 'active exploitation'
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) posted an alert on its website Sunday, July 20, saying it was aware of "active exploitation" of a security vulnerability that was allowing unauthorized access to on-site SharePoint servers.
The "scope and impact" of the issue was still being assessed, CISA said in the notice posted July 20, but officials said the vulnerability "poses a risk" to organizations that house their own SharePoint servers.
Microsoft, in an alert posted Saturday, July 19, said the vulnerability enables an 'authorized attacker to perform spoofing over a network,' a type of cyberattack in which an attacker attempts to trick a user or system into believing they are a trusted or known source.
"The FBI is aware of the matter, and we are working closely with our federal government and private sector partners," a Microsoft spokesperson told USA TODAY Monday.
SharePoint is used by government agencies and businesses in the U.S. and around the world, as reported by Reuters and the Washington Post, which first reported the attacks.
It was not immediately known who was behind the attack, but a cybersecurity researcher told Reuters on Monday, July 21, it is likely the work of a single actor.
"Based on the consistency of the tradecraft seen across observed attacks, the campaign launched on Friday appears to be a single actor," Rafe Pilling, Director of Threat Intelligence at Sophos, a British cybersecurity firm, told the outlet. "However, it's possible that this will quickly change."
Markets news: US stocks open higher as investors eye more earnings and tariff news
Microsoft SharePoint vulnerability
In its alert about the ongoing attacks on SharePoint servers, Microsoft urged customers to install new security updates.
The company said SharePoint Online in Microsoft 365, stored in the cloud, was not hit by the exploit. The attack is dubbed by experts as "zero day," because, officials said, it was a shock to cybersecurity researchers.
Microsoft's stock price was mostly flat on Monday morning, July 21.
'Customers should apply these updates'
Microsoft reported it issued recommendations to stop attackers from exploiting it.
"Microsoft has released security updates that fully protect customers using SharePoint Subscription Edition and SharePoint 2019 against the risks posed by CVE-2025-53770, and CVE-2025-53771," the post reads. 'Customers should apply these updates immediately to ensure they're protected."
To access Microsoft's link to the updates click here.
USA TODAY has reached out to Microsoft for more information.
Contributing: Reuters
Natalie Neysa Alund is a senior reporter for USA TODAY. Reach her at nalund@usatoday.com and follow her on X @nataliealund.
This article originally appeared on USA TODAY: Microsoft SharePoint servers hit by global hack: What we know

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Forbes
a minute ago
- Forbes
Google Photos Introduces New AI Tools: Fun, Free, And Very Limited
Google is adding new generative AI tools to Google Photos, shifting the app away from its original ... More purpose. Key Takeaways Google Photos could be at the start of a radical transformation. In a major update rolling out now, Google is introducing what could be the most significant Google Photos AI upgrade yet, allowing you to turn static images into animated video clips and stylized art with just a few taps. The tools are free and fun, but are deliberately and severely limited -- and in many ways, that's a good thing. Google's Remix feature turns still images into fun videos with AI. The Big Update: Photo To Video — Fun But Deliberately Nerfed As I previously reported, Google Photos is introducing a game-changing new feature that transforms still photos into short video clips with a single tap. It's a powerful, but significantly cut-down version of the photo-to-video features already available to paying Google AI Pro and Ultra subscribers in Gemini. You can select any picture in your Google Photos library, choose between the vague 'Subtle movement' or slot-machine-like 'I'm feeling lucky' options, and wait for about a minute for the video animation to generate. FEATURED | Frase ByForbes™ Unscramble The Anagram To Reveal The Phrase Pinpoint By Linkedin Guess The Category Queens By Linkedin Crown Each Region Crossclimb By Linkedin Unlock A Trivia Ladder Google's demos show once static people now celebrating by throwing handfuls of confetti in the air before it tumbles back down from above. These were both generated in 'I'm feeling lucky,' mode. I presume additional video effects will be available at launch and more added in the future. If you don't like the results, you can hit the Regenerate button to try again, but that's about it for user control. You can also tap on thumbs-up or thumbs-down icons to send feedback to Google. It would be great to see a few more preset options available, beyond just subtle movements or a random effect. Even adding just a few more emotions would make these clips useful as fun reactions for messaging apps, etc, in place of emojis or pre-made GIFs. The process takes up to a minute to complete, and you The focus here is clearly on fun rather than unbridled creativity. Where Gemini utilizes Google's powerful Veo3 video AI model to create animations of anything you want, Google Photos employs the older Veo 2 model, offering very little user control over what happens in the animation, except for repeatedly hitting the 'Regenerate' button. Furthermore, Veo 2 cannot generate audio, one of the standout features of Veo 3. Remix Your Photos — Too Little, Too Late? First discovered in May of this year, the new 'Remix' feature allows you to select a photo and transform it into a range of artistic styles, including cartoons, pencil sketches, and paintings. Google Photos Remix feature lets you transform photos into a range of artistic styles. As with the Photo to Video feature above, you can hit Regenerate to re-try any pictures you don't like and tap one of the thumb icons to provide feedback. Remix is clearly aimed at having fun and sharing moments in new ways, and there's nothing wrong with that. The results are Google's answer to the viral 'Ghliblified' images and action figure pictures you've probably seen taking over social media. However, unlike powerful tools like ChatGPT or Midjourney where you can simply type in any style imaginable, Remix forces you to pick from a small menu of pre-selected styles. The approach helps keep generated output safe for consumption, but also prevents any real creativity. Google will need to update the library of styles frequently or the novelty will wear off quickly. A New Direction For Google Photos — The Create Tab To make Google Photos' new generative tools easier to find, Google is introducing a new 'Create' tab, accessible by clicking an icon at the bottom of the app on both Android and iOS. Here, you'll be able to find all of Google Photos' creative tools gathered in one place, effectively separating the newer creative side of Google Photos from its original library functions. Google Photos introduces a new "Create" tab to house all of its new generative AI tools. This marks the beginning of a significant shift in purpose for Google Photos, as Google notes, it's now 'more than an archive, it's a canvas.' Personally, that's not what I want from Google Photos; I use it as a place to store and revisit memories rather than as a tool to create new content. The app's existing Animated slide shows and collages use AI to enhance memories, but these new tools alter them into something entirely new, creating video clips of events that never really happened. Google Photos Now Creates, But Is It Safe? Google appears to be exercising considerable caution with these new features, not least by severely limiting the scope of what can be created with these new Google Photos tools. However, the company acknowledges that the results may be 'inaccurate or unexpected' and displays a warning before use, along with a link to its GenAI prohibited use policy. Furthermore, all images and videos generated by Google Photos using AI contain invisible SynthID watermarks that reveal their synthetic origins. The Big Issue: US-Only Rollout Alienates Global Users Photo to Video and Remix are now rolling out on Android and iOS, but are currently only available in the US. The Create tab will then roll out in August, but once again, only in the US. This will be disappointing for international users, who may have to wait a considerable amount of time to access the new features. Remember, Google Photos users outside the US are still waiting for access to the AI-powered 'Ask Photos' feature nine months after launch. Google Photos has a massive worldwide user base, with billions of photos and videos uploaded each week, and runs the risk of frustrating a colossal number of customers if non-US customers remain excluded from its best features. Follow @paul_monckton on Instagram.


The Verge
a minute ago
- The Verge
Samsung reveals a mysterious $16.5 billion chip deal.
Chip race: Microsoft, Meta, Google, and Nvidia battle it out for AI chip supremacy See all Stories Posted Jul 28, 2025 at 3:04 AM UTC Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates. Richard Lawler Posts from this author will be added to your daily email digest and your homepage feed. See All by Richard Lawler Posts from this topic will be added to your daily email digest and your homepage feed. See All Business Posts from this topic will be added to your daily email digest and your homepage feed. See All News Posts from this topic will be added to your daily email digest and your homepage feed. See All Samsung Posts from this topic will be added to your daily email digest and your homepage feed. See All Tech


Bloomberg
4 minutes ago
- Bloomberg
Goldman's Asset Arm Says Emerging Markets Catching Only ‘First Wave' of Flows
Emerging markets are set for further gains as renewed appetite for diversification and light positioning bolster the case for the asset class, which has been marred by years of outflows, according to Goldman Sachs Group Inc. 's asset-management division. 'The flow tide is turning — and we believe EM is catching the first wave,' said Anupam Damani, co-head of emerging-market debt at Goldman Sachs Asset Management. 'After years of being sidelined by US-centric risk taking, diversification is quietly reclaiming its place in global portfolios.'