July 2025

Clarifying common questions around AMSI in SharePoint

In discussions with customers about the current situation — where active attacks are targeting on-premises SharePoint servers — it has become clear that additional clarity is needed regarding how AMSI integration works in SharePoint. Here are some of the questions we’ve received:   Question: How can we verify if AMSI is working correctly in SharePoint […]

Microsoft is aware of active attacks targeting on-premises SharePoint Server (2016, 2019, Subscription Edition) customers by exploiting vulnerabilities partially addressed by the July Security Update. SharePoint Administrators are advised to check there SharePoint machines for a file named spinstall0.aspx in the …\16\TEMPLATE\LAYOUTS directory. If this file exists the machines are most likely already affected. Microsoft […]

Below are the security fixes for the SharePoint OnPrem versions released this month. SharePoint Server 2016: KB 5002744 – SharePoint Server 2016 (language independent) KB 5002743 – SharePoint Server 2016 (language dependent) Microsoft Support recommends to install the complete July 2025 CU for SharePoint 2016 rather than individual security fixes. SharePoint Server 2019: KB 5002741 […]

The product group released the July 2025 Cumulative Update for SharePoint Server Subscription Edition. Monthly SharePoint Server Subscription edition updates are released as a single unified “uber” package containing both the language independent and language dependent fixes. Language independent and language dependent fixes will no longer be released separately. This is similar to the full […]