Microsoft SharePoint zero-day exploited in RCE attacks

Critical zero-day vulnerabilities in Microsoft SharePoint, tracked as CVE-2025-53770 and CVE-2025-53771, have been actively exploited since at least July 18th, with no patch available. At least 85 servers have already been compromised worldwide.