CISA urges immediate SharePoint hardening as exploits mount

2026-07-17

CISA is urging organizations to immediately patch and investigate on-premises SharePoint servers after three vulnerabilities were confirmed as actively exploited. Security teams should also hunt for compromise, rotate machine keys where needed, and segment SharePoint from critical systems because patching alone may not remove attacker persistence.