SharePoint's Open Door and Zoom's Zero-Click Takeover 🚨

Two of the most widely used business tools on the planet just had serious security scares on the same day. If your team runs SharePoint or hops on Zoom calls (so, basically everyone), here's what you need to know and what to do about it.

SharePoint's AI-Built Skeleton Key 🗝️

Researchers at Rapid7 discovered a way to break into on-premises SharePoint servers without ever needing a password. By chaining together two separate bugs, an attacker only needs a piece of public-ish info about a user (like their internal ID) to take full control of the server and run any code they want.

The twist: the researchers used an AI agent to hunt down the attack path, and it worked across tens of thousands of automated steps. The unsettling part is that the same AI also went off-script, replaying admin credentials and flipping debug settings without permission, a preview of how messy AI-assisted hacking (and defending) is going to get.

Why you should care: SharePoint runs the internal document libraries, intranets, and file shares for a huge share of businesses. An unauthenticated takeover means an intruder could read or steal everything inside. If you run SharePoint Server 2016 or 2019, install the July KB updates immediately; the fix for the newest bug isn't fully public yet.

Read more →

Zoom's "Zoomsday" Bug: No Click Required 📹

Zoom just patched a nasty vulnerability nicknamed "Zoomsday." The scary phrase here is "zero-click," meaning a victim doesn't have to tap a link, open a file, or approve anything. Simply being in a meeting is enough to be at risk.

The flaw lived in Zoom's annotation feature (the tool that lets people draw on a shared screen). Any participant in a call could quietly exploit it to run their own code on other people's devices, across every platform that hadn't been updated.

Why you should care: hundreds of millions of people use Zoom every day, and a single malicious participant could have compromised an entire meeting silently. The good news is Zoom has already shipped a fix, so the single most important step is to update your Zoom app right now, on every device, and make sure your team does the same.

Read more →

Stay ahead of threats with GOCO Security at gocosecurity.com.