Microsoft SharePoint breach places insurance coverage market on alert as shoppers scramble to comprise harm

Based on researchers from Eye Safety and the Shadowserver Basis, attackers exploited a beforehand unknown flaw – a so-called “zero-day” – to realize unauthenticated entry to weak SharePoint servers. This allowed them to execute arbitrary code, impersonate companies, steal credentials, and set up persistent backdoors.