"Ransomware Crew Reportedly Exploiting Critical Microsoft SharePoint Vulnerability"

A functional exploit for a critical Microsoft SharePoint vulnerability, CVE-2023-29357, is reportedly in the hands of a ransomware group, despite being added to the US's must-patch list. The vulnerability, which can achieve remote code execution, was first identified in June 2023 and has been actively exploited by cybercriminals. Security experts warn that organizations need to apply manual, SharePoint-specific patches to ensure the fixes are properly applied, as simply applying the June 2023 Patch Tuesday updates won't automatically protect their systems.