CISA Urges Immediate Patching of Actively Exploited SharePoint Zero-Days

CISA is warning that three SharePoint vulnerabilities are being actively exploited in attacks against internet-exposed on-premises SharePoint Server instances, two of which were targeted as zero-days. The agency is urging organizations running on-prem SharePoint Server to patch immediately.