Microsoft Under Fire After Major SharePoint Security Breach

1

While Microsoft has issued security updates for affected SharePoint versions, an older 2016 version remains vulnerable as the company works to develop a patch. Cybersecurity experts at Palo Alto Networks estimated this breach potentially affects thousands of organisations worldwide, highlighting the real and immediate threat posed by these exploits.

The vulnerability is of particular concern as it allows hackers to impersonate users even after patches are applied, according to researchers at Eye Security, a European cybersecurity firm responsible for identifying the flaw. This breach significantly impacts organisations relying on SharePoint for document storage and collaboration.

This security breach raises grave concerns for businesses and governmental bodies relying on SharePoint. The capability to impersonate users and integrate with other Microsoft services such as Outlook and Teams exacerbates the risk, leading to potential data theft, password compromises, and further infiltrations. Eye Security researchers warn that breaches of this nature can escalate rapidly to data exfiltration, deployment of backdoors, and theft of cryptographic keys, presenting a long-term cybersecurity threat to organisations.

The incident underscores the necessity for organisations to remain vigilant and promptly apply available security updates to safeguard their systems. As threats evolve, maintaining robust cybersecurity measures is crucial to mitigating risks and protecting sensitive data from malicious attacks.

Microsoft is actively working to address the vulnerabilities and develop solutions for affected versions of SharePoint. Organisations using on-premises SharePoint servers are urged to install the security updates provided by Microsoft to enhance their defences against such threats.

Meanwhile, cybersecurity experts emphasise the importance of comprehensive security strategies, including regular system updates and employee awareness training, to combat sophisticated cyberattacks. As incidents like this highlight ongoing cybersecurity challenges, maintaining proactive measures and collaboration with security researchers will be vital for organisations to safeguard their digital assets and protect against future threats.

Published:Tuesday, 22nd Jul 2025
Source: Paige Estritori

Share this news item:

Insurance News

NSW Workers’ Compensation Scheme Faces Major Overhaul Amid Underinsurance Issues 23 Jul 2025: Paige Estritori The New South Wales State Insurance Regulatory Authority (SIRA) has identified critical issues of underinsurance and employer non-compliance within the icare workers’ compensation scheme. A recent review highlighted that over $60 million in premiums were not collected due to missing wage declarations, with about 75% of employers audited showing non-compliance responsible for an additional $24.5 million in unpaid premiums. - read more

Insurer Prevails in Vehicle Value Dispute 23 Jul 2025: Paige Estritori In a recent ruling by the Australian Financial Complaints Authority (AFCA), a protest from a car owner against her insurer, RAC Insurance, regarding the reduction of her vehicle's agreed value has been dismissed. The case arose after the complainant made a total loss claim following an accident in October, only to discover that her vehicle's value had been adjusted down to $29,700 from a previous total of $40,000. - read more

Microsoft Under Fire After Major SharePoint Security Breach 22 Jul 2025: Paige Estritori Microsoft is grappling with an alarming security breach affecting its SharePoint collaboration software, impacting organisations and government entities globally. The Cybersecurity and Infrastructure Security Agency (CISA) recently unveiled the vulnerability, warning that it permits unauthorised access to systems and complete access to SharePoint content, enabling malicious actors to execute code across networks. - read more

Insurers Urged to Ensure Fairness Before Stopping Payouts 22 Jul 2025: Paige Estritori The Australian Financial Complaints Authority (AFCA) has highlighted the importance of procedural fairness in a ruling against TAL, a major life insurer. The directive stresses that insurers must allow customers an opportunity to respond before ceasing their benefits. This ruling came after TAL halted payments under an income protection policy from May 2023 to February 2024, issuing a procedural fairness letter only in June last year, months after payments ceased. - read more

Tasmanian Liberals Propose State-Backed Insurance Amid Criticism 21 Jul 2025: Paige Estritori The Tasmanian Liberal Party, under Premier Jeremy Rockliff, is advocating for a state-backed general insurer—TasInsure—should they win the upcoming state election on July 19. This initiative aims to mitigate rising insurance premiums allegedly caused by the national market's failures. However, the plan has been met with strong opposition from private insurers and critics who question its viability. - read more

AFCA Sides with Policyholder in Storm Damage Dispute 18 Jul 2025: Paige Estritori A recent ruling by the Australian Financial Complaints Authority (AFCA) has favoured a policyholder in a dispute with insurer Auto & General over storm damage. The case involved a collapsed ceiling, initially attributed to a storm by the insurer before an about-face led them to deny the claim. The AFCA decision marks a significant instance where consumer protection mechanisms have countered an insurer's attempt to deny coverage. - read more