{"id":8522,"date":"2025-09-22T12:48:13","date_gmt":"2025-09-22T16:48:13","guid":{"rendered":"https:\/\/www.vdh.virginia.gov\/drinking-water\/?p=8522"},"modified":"2025-11-05T15:02:16","modified_gmt":"2025-11-05T20:02:16","slug":"microsoft-sharepoint-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/","title":{"rendered":"Microsoft Sharepoint Vulnerabilities"},"content":{"rendered":"

The U.S. EPA is issuing this alert to inform water and wastewater system owners and operators of the need for increased vigilance surrounding the use of Microsoft SharePoint.\u00a0 While the scope and impact continue to be assessed, the chain, publicly reported as \u201cToolShell,\u201d provides unauthenticated access to systems and authenticated access through network spoofing, respectively, and enables malicious actors to fully access SharePoint content, including file systems and internal configurations, and execute code over the network.\u00a0 See a full update regarding this release on the\u00a0CISA’s Webpage.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

The U.S. EPA is issuing this alert to inform water and wastewater system owners and operators of the need for increased vigilance surrounding the use of Microsoft SharePoint.\u00a0 While the scope and impact continue to be assessed, the chain, publicly reported as \u201cToolShell,\u201d provides unauthenticated access to systems and authenticated access through network spoofing, respectively, […]<\/p>\n","protected":false},"author":646,"featured_media":8676,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"no","_lmt_disable":"yes","footnotes":""},"categories":[21],"tags":[],"class_list":["post-8522","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"modified_by":"matthewframe","yoast_head":"\nMicrosoft Sharepoint Vulnerabilities - Drinking Water<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Sharepoint Vulnerabilities - Drinking Water\" \/>\n<meta property=\"og:description\" content=\"The U.S. EPA is issuing this alert to inform water and wastewater system owners and operators of the need for increased vigilance surrounding the use of Microsoft SharePoint.\u00a0 While the scope and impact continue to be assessed, the chain, publicly reported as \u201cToolShell,\u201d provides unauthenticated access to systems and authenticated access through network spoofing, respectively, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/\" \/>\n<meta property=\"og:site_name\" content=\"Drinking Water\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-22T16:48:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-05T20:02:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"612\" \/>\n\t<meta property=\"og:image:height\" content=\"490\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"matthewframe\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"matthewframe\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/\"},\"author\":{\"name\":\"matthewframe\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/#\\\/schema\\\/person\\\/03305682d0faf3ed41e138fada913c53\"},\"headline\":\"Microsoft Sharepoint Vulnerabilities\",\"datePublished\":\"2025-09-22T16:48:13+00:00\",\"dateModified\":\"2025-11-05T20:02:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/\"},\"wordCount\":92,\"image\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/content\\\/uploads\\\/sites\\\/14\\\/istockphoto-1345304217-612x612-1.jpg\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/\",\"url\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/\",\"name\":\"Microsoft Sharepoint Vulnerabilities - Drinking Water\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/content\\\/uploads\\\/sites\\\/14\\\/istockphoto-1345304217-612x612-1.jpg\",\"datePublished\":\"2025-09-22T16:48:13+00:00\",\"dateModified\":\"2025-11-05T20:02:16+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/#\\\/schema\\\/person\\\/03305682d0faf3ed41e138fada913c53\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/content\\\/uploads\\\/sites\\\/14\\\/istockphoto-1345304217-612x612-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/content\\\/uploads\\\/sites\\\/14\\\/istockphoto-1345304217-612x612-1.jpg\",\"width\":612,\"height\":490,\"caption\":\"Computer with exclamation mark. Alert notification. Illustration vector\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/2025\\\/09\\\/22\\\/microsoft-sharepoint-vulnerabilities\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft Sharepoint Vulnerabilities\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/#website\",\"url\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/\",\"name\":\"Drinking Water\",\"description\":\"To promote and protect the health of all Virginians\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/#\\\/schema\\\/person\\\/03305682d0faf3ed41e138fada913c53\",\"name\":\"matthewframe\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g\",\"caption\":\"matthewframe\"},\"url\":\"https:\\\/\\\/www.vdh.virginia.gov\\\/drinking-water\\\/author\\\/matthewframe\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Sharepoint Vulnerabilities - Drinking Water","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Sharepoint Vulnerabilities - Drinking Water","og_description":"The U.S. EPA is issuing this alert to inform water and wastewater system owners and operators of the need for increased vigilance surrounding the use of Microsoft SharePoint.\u00a0 While the scope and impact continue to be assessed, the chain, publicly reported as \u201cToolShell,\u201d provides unauthenticated access to systems and authenticated access through network spoofing, respectively, […]","og_url":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/","og_site_name":"Drinking Water","article_published_time":"2025-09-22T16:48:13+00:00","article_modified_time":"2025-11-05T20:02:16+00:00","og_image":[{"width":612,"height":490,"url":"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg","type":"image\/jpeg"}],"author":"matthewframe","twitter_card":"summary_large_image","twitter_misc":{"Written by":"matthewframe"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#article","isPartOf":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/"},"author":{"name":"matthewframe","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/#\/schema\/person\/03305682d0faf3ed41e138fada913c53"},"headline":"Microsoft Sharepoint Vulnerabilities","datePublished":"2025-09-22T16:48:13+00:00","dateModified":"2025-11-05T20:02:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/"},"wordCount":92,"image":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/","url":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/","name":"Microsoft Sharepoint Vulnerabilities - Drinking Water","isPartOf":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#primaryimage"},"image":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg","datePublished":"2025-09-22T16:48:13+00:00","dateModified":"2025-11-05T20:02:16+00:00","author":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/#\/schema\/person\/03305682d0faf3ed41e138fada913c53"},"breadcrumb":{"@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#primaryimage","url":"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg","contentUrl":"https:\/\/www.vdh.virginia.gov\/content\/uploads\/sites\/14\/istockphoto-1345304217-612x612-1.jpg","width":612,"height":490,"caption":"Computer with exclamation mark. Alert notification. Illustration vector"},{"@type":"BreadcrumbList","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/2025\/09\/22\/microsoft-sharepoint-vulnerabilities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.vdh.virginia.gov\/drinking-water\/"},{"@type":"ListItem","position":2,"name":"Microsoft Sharepoint Vulnerabilities"}]},{"@type":"WebSite","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/#website","url":"https:\/\/www.vdh.virginia.gov\/drinking-water\/","name":"Drinking Water","description":"To promote and protect the health of all Virginians","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.vdh.virginia.gov\/drinking-water\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.vdh.virginia.gov\/drinking-water\/#\/schema\/person\/03305682d0faf3ed41e138fada913c53","name":"matthewframe","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a991f19951831d50c4aab5d32fb14ef129dd9a34323680623a344061536afbdd?s=96&d=mm&r=g","caption":"matthewframe"},"url":"https:\/\/www.vdh.virginia.gov\/drinking-water\/author\/matthewframe\/"}]}},"_links":{"self":[{"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/posts\/8522","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/users\/646"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/comments?post=8522"}],"version-history":[{"count":1,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/posts\/8522\/revisions"}],"predecessor-version":[{"id":8523,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/posts\/8522\/revisions\/8523"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/media\/8676"}],"wp:attachment":[{"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/media?parent=8522"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/categories?post=8522"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vdh.virginia.gov\/drinking-water\/wp-json\/wp\/v2\/tags?post=8522"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}