Hackers exploited a zero-day vulnerability in Microsoft SharePoint servers, targeting US federal agencies and other entities.

Microsoft released security updates for SharePoint Subscription Edition and SharePoint 2019, noting “customers should apply these updates immediately to ensure they’re protected.” The company added that it was developing security updates for supported versions of SharePoint 2019 and SharePoint 2016.

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk.

Microsoft recently revealed that an internal customer support database experienced a security breach last year which may have exposed the data of certain customers. Most customers weren’t ...