Wall Street Breakfast Podcast: Microsoft Sounds Alarm On SharePoint Attacks

Microsoft has issued an urgent warning about "active attacks" exploiting "zero-day" vulnerabilities in its on-premises SharePoint server software (2016/2019 versions), impacting government agencies and businesses, with tens of thousands of servers potentially at risk and immediate patching advised. Separately, the London Stock Exchange Group is exploring 24-hour trading to meet growing retail demand, a trend also considered by other major exchanges like NYSE and Nasdaq, signaling a potential shift in global market structure. Meanwhile, Block (SQ) is set to join the S&P 500 index, effective July 23.

Analysis

Microsoft (MSFT) is facing a significant cybersecurity event involving active "zero-day" attacks on its on-premises SharePoint server software for the 2016 and 2019 editions. The vulnerability, which allows an authorized attacker to perform network spoofing, puts tens of thousands of servers at risk, primarily within government and business sectors. While Microsoft has issued a security patch, the incident underscores the persistent risks associated with legacy on-premises infrastructure. Notably, the company emphasized that its strategic cloud-based SharePoint Online service, a component of Microsoft 365, is not affected by this flaw. In a separate development indicating a structural shift in market mechanics, the London Stock Exchange Group (LDNXF) is exploring a move to 24-hour trading to cater to rising retail investor demand, a trend being pursued by major U.S. exchanges like NYSE (ICE) and Nasdaq (NDAQ). On the corporate front, Block (XYZ) received a major positive catalyst with its announced inclusion in the S&P 500, effective July 23, following the acquisition of Hess (HES) by Chevron (CVX). Conversely, Alaska Airlines (ALK) experienced a negative operational event, with a 3-hour ground stop for all mainline flights attributed to an IT systems failure, highlighting potential technology risks within the airline sector.

Key Decisions for Investors

• For Microsoft, investors should monitor the fallout from the SharePoint vulnerability, as it could accelerate the migration of on-premises customers to its higher-margin, unaffected cloud-based Microsoft 365 platform.
• The announced inclusion of Block in the S&P 500 effective July 23 presents a significant near-term catalyst, as index-tracking funds will be required to purchase the stock, potentially creating upward price pressure.
• The potential shift to 24-hour trading by the London Stock Exchange, following similar moves by U.S. counterparts, signals a structural market evolution; investors in exchange operators like LSEG, ICE, and Nasdaq should assess the long-term revenue potential against the required technology and regulatory costs.
• Alaska Airlines' recent IT-driven ground stop, coupled with a recent cyber incident at a sister carrier, raises concerns about operational and cybersecurity resilience, warranting closer scrutiny of the company's technology infrastructure and associated risks.