Uploaded July 2025 | Updated September 2026, 7 hours ago
A critical 0-day is hitting on-prem SharePoint servers, combining CVE-2025-53770 and CVE-2025-53771 for full unauthenticated RCE. In this video, Tib3rius explains how the attack was discovered, how it works, and what sysadmins need to do to protect their servers. Ends with a demo showing the exploit in action.
Bleeping Computer article: bleepingcomputer.com/news/security/us-nuclear-weapons-agency-hacked-in-microsoft-sharepoint-attacks
Microsoft Customer Guidance: msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770
Microsoft CVE-2025-53770: msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770
Microsoft CVE-2025-53771: msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771
eye.security blog post: https://research.eye.security/sharepoint-under-siege/
Metasploit Module: github.com/rapid7/metasploit-framework/pull/20409
X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius
A critical 0-day is hitting on-prem SharePoint servers, combining CVE-2025-53770 and CVE-2025-53771 for full unauthenticated RCE. In this video, Tib3rius explains how the attack was discovered, how it works, and what sysadmins need to do to protect their servers. Ends with a demo showing the exploit in action.
Bleeping Computer article: bleepingcomputer.com/news/security/us-nuclear-weapons-agency-hacked-in-microsoft-sharepoint-attacks
Microsoft Customer Guidance: msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770
Microsoft CVE-2025-53770: msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770
Microsoft CVE-2025-53771: msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771
eye.security blog post: https://research.eye.security/sharepoint-under-siege/
Metasploit Module: github.com/rapid7/metasploit-framework/pull/20409
X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius
