Microsoft knew of SharePoint server exploit but failed to effectively patch it

A security patch released by Microsoft last month failed to fully fix a critical flaw in U.S. tech giant's SharePoint server software that had been identified in May, opening the door to a sweeping global cyber espionage operation.
More info