CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

CISA confirmed ransomware gangs are actively exploiting a high-severity Microsoft SharePoint remote code execution vulnerability, flagged as actively exploited since early July. The flaw allows attackers to gain unauthorized access to systems. CISA urged federal agencies to apply patches by a specified deadline. Organizations are advised to prioritize updates to prevent ransomware deployment. The vulnerability underscores risks in widely used enterprise collaboration platforms.