Enterfusion Insights
The 2025 SharePoint Attacks: An Update May Be Only the First Step
What happened
In July 2025, attackers used flaws in Microsoft SharePoint Server to enter systems. These attacks affected SharePoint servers run by organizations. They did not affect SharePoint Online in Microsoft 365.
Microsoft released fixes and called for more steps, including replacing certain security keys and checking for signs of an attack. Some attackers had used the flaws to install ransomware. Read Microsoft’s incident report.
Questions to ask when a serious flaw is found
The lesson applies beyond SharePoint. When a serious flaw is being used in real attacks, ask your IT team:
- Do we use the affected product and version?
- Who is responsible for fixing it?
- Has anyone checked whether attackers already got in?
- Does the vendor require steps beyond installing the update?
Keep a current list of business systems and who manages them. That helps your team act quickly when an urgent warning arrives.
A useful status report should explain what was fixed, what was checked, and what still needs attention.
Make your next step clear
Contact Enterfusion to discuss your IT maintenance plan.
Contact Enterfusion