Microsoft has issued emergency security updates to address a critical zero-day vulnerability in SharePoint Server that cybercriminals have exploited to breach US federal and state agencies, universities, energy companies, and organizations worldwide over the past weekend.