Microsoft Under Fire After Major SharePoint Security Breach

1

While Microsoft has issued security updates for affected SharePoint versions, an older 2016 version remains vulnerable as the company works to develop a patch. Cybersecurity experts at Palo Alto Networks estimated this breach potentially affects thousands of organisations worldwide, highlighting the real and immediate threat posed by these exploits.

The vulnerability is of particular concern as it allows hackers to impersonate users even after patches are applied, according to researchers at Eye Security, a European cybersecurity firm responsible for identifying the flaw. This breach significantly impacts organisations relying on SharePoint for document storage and collaboration.

This security breach raises grave concerns for businesses and governmental bodies relying on SharePoint. The capability to impersonate users and integrate with other Microsoft services such as Outlook and Teams exacerbates the risk, leading to potential data theft, password compromises, and further infiltrations. Eye Security researchers warn that breaches of this nature can escalate rapidly to data exfiltration, deployment of backdoors, and theft of cryptographic keys, presenting a long-term cybersecurity threat to organisations.

The incident underscores the necessity for organisations to remain vigilant and promptly apply available security updates to safeguard their systems. As threats evolve, maintaining robust cybersecurity measures is crucial to mitigating risks and protecting sensitive data from malicious attacks.

Microsoft is actively working to address the vulnerabilities and develop solutions for affected versions of SharePoint. Organisations using on-premises SharePoint servers are urged to install the security updates provided by Microsoft to enhance their defences against such threats.

Meanwhile, cybersecurity experts emphasise the importance of comprehensive security strategies, including regular system updates and employee awareness training, to combat sophisticated cyberattacks. As incidents like this highlight ongoing cybersecurity challenges, maintaining proactive measures and collaboration with security researchers will be vital for organisations to safeguard their digital assets and protect against future threats.

Published:Tuesday, 22nd Jul 2025
Source: Paige Estritori

Share this news item:

Insurance News

Clear

AFCA Rejects Traveller's Insurer Claim for Alternative Flight Costs 25 Jul 2025: Paige Estritori An Australian travel insurance policyholder faced disappointment as the Australian Financial Complaints Authority (AFCA) denied their claim for reimbursement of costs incurred due to changing travel plans amid threats of a pilot strike. The traveller, who rearranged his flights from Sydney to Vancouver and subsequently to Toronto, had hoped his insurer, AIG Australia, would cover the $5,576 expenses for the rebooked flights and additional accommodation. - read more

Fee Models Emerge as Solution to Cyclone Insurance Affordability Concerns 25 Jul 2025: Paige Estritori The affordability of cyclone insurance in Australia’s high-risk zones remains a pressing issue, prompting some brokers to shift towards fee-based models. This change is highlighted in the latest annual review of the cyclone reinsurance pool from the Australian Competition and Consumer Commission (ACCC). - read more

Homeowner's Storm Damage Claim Denied; Faulty Construction Cited 24 Jul 2025: Paige Estritori A homeowner's attempt to secure a storm damage insurance payout has been thwarted after an investigation revealed that the damage was due to poor maintenance and faulty construction, rather than extreme weather conditions. The initial claim attributed the damage on the property's western wall and roof eaves to significant rainfall, citing a substantial 141mm in July, with a notable record of 43.6mm in a single day. - read more

NSW Workers’ Compensation Scheme Faces Major Overhaul Amid Underinsurance Issues 23 Jul 2025: Paige Estritori The New South Wales State Insurance Regulatory Authority (SIRA) has identified critical issues of underinsurance and employer non-compliance within the icare workers’ compensation scheme. A recent review highlighted that over $60 million in premiums were not collected due to missing wage declarations, with about 75% of employers audited showing non-compliance responsible for an additional $24.5 million in unpaid premiums. - read more

Insurer Prevails in Vehicle Value Dispute 23 Jul 2025: Paige Estritori In a recent ruling by the Australian Financial Complaints Authority (AFCA), a protest from a car owner against her insurer, RAC Insurance, regarding the reduction of her vehicle's agreed value has been dismissed. The case arose after the complainant made a total loss claim following an accident in October, only to discover that her vehicle's value had been adjusted down to $29,700 from a previous total of $40,000. - read more