Microsoft SharePoint Zero-Day Exploit Impacts Global Entities Amid Patch Delay

A critical vulnerability in Microsoft's on-premises SharePoint servers has exposed government agencies, universities, and critical infrastructure providers worldwide. The unpatched zero-day flaw has already compromised systems in over 50 organizations across North America, Europe, and Asia.

Attackers have weaponized the breach to seize sensitive documents, including public records in one U.S. state agency. Unlike cloud-based Microsoft 365 services, the exploit targets internal document management systems, forcing victims to implement temporary server configuration changes as stopgap measures.

International cybersecurity agencies from the U.S., Canada, and Australia are coordinating investigations. Microsoft's delayed patch response highlights growing enterprise security challenges as threat actors increasingly target foundational business collaboration tools.