最新报道:Microsoft issued emergency patches for critical vulnerabilities in SharePoint Server after reports of active exploitation in targeted attacks. The flaws, tracked as CVE-2023-29357 and CVE-2023-24955, allow attackers to bypass authentication and execute remote code. Microsoft warned that unpatched systems could enable privilege escalation attacks. The company urged customers to apply updates immediately, noting the vulnerabilities affect SharePoint Server 2019 and 2016. Cybersecurity experts observed limited but sophisticated attacks leveraging these flaws, likely by state-sponsored actors. Microsoft's rapid response highlights growing concerns about enterprise collaboration platforms becoming prime targets for advanced persistent threats.