{"data":{"id":"cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d","slug":"cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d","title":"CISA warns SharePoint Server Subscription Edition, 2019, and 2016 are under active exploitation—patches plus compromise hunting needed","dek":"The alert is for supported on-prem SharePoint Server versions and includes CISA’s recommended sequence (hunt for intrusion artifacts before rotating IIS machine keys) and detection steps like AMSI integration, deeper request scanning, and webshell/machine-key checks.","published_at":"2026-07-18T22:26:08.796461+00:00","status":"blocked","tags":["economics","SharePoint Server","Known Exploited Vulnerabilities (KEV) Catalog","IIS machine keys","AMSI"],"places":[],"quick_take":null,"markdown":"CISA says multiple SharePoint Server vulnerabilities are being actively exploited in the wild against supported on-premises deployments: SharePoint Server Subscription Edition, 2019, and 2016.\n\nThat boundary matters. The alert is about on-prem servers, not cloud SharePoint, and CISA’s guidance makes direct internet exposure an operational priority rather than a separately confirmed scope fact. If a SharePoint server is directly exposed, it should move up the list — but the confirmed affected set is the supported on-prem line.\n\nThe reason this is more than a routine patch notice is the behavior CISA says it has seen or expects. The alert ties the activity to remote code execution, unauthorized access, IIS machine-key theft, deserialization, persistence, and malware deployment. Microsoft’s CVE-2026-58644 page identifies the issue as a SharePoint remote code execution flaw, marks it as exploited, and says an attacker authenticated as at least a Site Owner could write arbitrary code and execute it remotely.\n\nSo the response is not just install updates and move on. CISA says operators should apply Microsoft’s patches, verify installation, and shorten patch cycles where possible. It also says to enable AMSI integration for each SharePoint web application and use Full Mode for request-body scanning where feasible, improve logging, watch for anomalous requests and suspicious SharePoint worker-process activity, and look for webshells and machine-key access.\n\nCISA is also explicit about sequence: before rotating IIS machine keys, hunt for and remediate intrusion artifacts, including machine-key harvesters that could let attackers steal them again. And if SharePoint has to stay exposed, CISA wants it behind a Layer 7 reverse proxy or equivalent application-layer control that requires authentication and can inspect and filter requests.\n\nKEV listing is a severity signal, and for FCEB agencies it also carries a specific remediation clock. But for most operators, the more important point is narrower and harsher: patching may be necessary without being sufficient.\n\nWhat remains unresolved is just as important. CISA does not name an actor or malware family, and the sources here do not establish whether the four exploited CVEs are one chain, parallel flaws, or separate parts of a broader wave. CISA also draws a boundary around at least one newly disclosed SharePoint CVE that it says is not yet known to have been exploited. The safe reading is active compromise risk, not a finished campaign narrative.\n\n**SharePoint exploitation timeline for the KEV and MS patch window**\n\n![SharePoint exploitation timeline for the KEV and MS patch window](/analytics/cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d/analytic_req_1.svg)\n\n*Microsoft released the MSRC advisory for CVE-2026-58644 on Jul 14, 2026 (last updated Jul 15), the same day CISA published its SharePoint hardening alert; CISA then added that CVE to the KEV catalog on Jul 16 and revised the alert accordingly. Three other CVEs named as actively exploited (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164) appear as labels only — the profile has no KEV addition dates for them. — AI-assisted analytic, built only from cited data. Source: cited claims clm_840b6f46ce, clm_0eea7ef7c7, clm_e371bee28c, clm_8783eaa575, clm_acf1cf77cd, clm_0ef82990f9, clm_7acb5ba602. As of 2026-07-17.*\n\n**Compromise-assessment coverage: what to hunt vs. what to patch (from CISA guidance)**\n\n| Bucket | Definition |\n|--------|------------|\n| **A — Patch / verify** | Apply patches, verify installation, accelerate patch cycles |\n| **B — Compromise hunt / contain** | Pre-rotation artifact hunting, AMSI, logging & anomaly watch, webshell/machine-key checks, reduce direct internet exposure |\n\n*Based on CISA’s recommended response, what share of actions are 'patch/verify' vs 'compromise hunting/containment'—and how does that vary by SharePoint version? AI-assisted analytic, built only from cited data.*\n\n**CISA-referenced SharePoint versions mapped to exploitation scope and key defenses**\n\n| Version | CISA says it’s actively exploited | Post-exploitation behaviors cited | High-priority defenses |\n|---|---|---|---|\n| SharePoint Server Subscription Edition | Yes | Applies to all listed versions: RCE; IIS machine-key theft; deserialization; persistence; malware deployment | Recommended in advisory (not version-differentiated): • Apply Microsoft’s latest patches, verify installation, shorten patch cycles • Enable AMSI integration per SharePoint web application; Full Mode request-body scanning where feasible • Improve logging; hunt anomalous requests, suspicious worker-process activity, webshells, and machine-key access • Hunt and remediate intrusion artifacts (incl. machine-key harvesters) before rotating IIS machine keys • Avoid direct internet exposure; if exposure is required, put SharePoint behind a Layer 7 reverse proxy (or equivalent authenticated app-layer control) |\n| SharePoint Server 2019 | Yes | Applies to all listed versions: RCE; IIS machine-key theft; deserialization; persistence; malware deployment | Recommended in advisory (not version-differentiated): • Apply Microsoft’s latest patches, verify installation, shorten patch cycles • Enable AMSI integration per SharePoint web application; Full Mode request-body scanning where feasible • Improve logging; hunt anomalous requests, suspicious worker-process activity, webshells, and machine-key access • Hunt and remediate intrusion artifacts (incl. machine-key harvesters) before rotating IIS machine keys • Avoid direct internet exposure; if exposure is required, put SharePoint behind a Layer 7 reverse proxy (or equivalent authenticated app-layer control) |\n| SharePoint Server 2016 | Yes | Applies to all listed versions: RCE; IIS machine-key theft; deserialization; persistence; malware deployment | Recommended in advisory (not version-differentiated): • Apply Microsoft’s latest patches, verify installation, shorten patch cycles • Enable AMSI integration per SharePoint web application; Full Mode request-body scanning where feasible • Improve logging; hunt anomalous requests, suspicious worker-process activity, webshells, and machine-key access • Hunt and remediate intrusion artifacts (incl. machine-key harvesters) before rotating IIS machine keys • Avoid direct internet exposure; if exposure is required, put SharePoint behind a Layer 7 reverse proxy (or equivalent authenticated app-layer control) |\n\n*For each affected SharePoint Server version in the advisory (Subscription Edition, 2019, 2016), what is the supported on-prem exploitation scope CISA describes, and which high-priority defenses are universally recommended? AI-assisted analytic, built only from cited data.*","receipts_markdown":"**How this piece is framed:** A defensive operations frame with a hard boundary between confirmed scope and inferred priority: this is an active exploitation event against named supported on-prem SharePoint Server versions, and the reader needs to see both the patching task and the compromise-hunting task — while keeping clear that internet exposure is an operational priority inferred from CISA’s mitigation guidance, not a separately confirmed scope fact.\n\n**Charts & tables** — _each built only from the cited claims below, by an AI tool_\n- SharePoint exploitation timeline for the KEV and MS patch window — from claims clm_840b6f46ce, clm_0eea7ef7c7, clm_e371bee28c, clm_8783eaa575, clm_acf1cf77cd, clm_0ef82990f9, clm_7acb5ba602 · as of 2026-07-17\n- Compromise-assessment coverage: what to hunt vs. what to patch (from CISA guidance) — from claims clm_c4415ede07, clm_0c0a526656, clm_de87c3643d, clm_839f6fd01c, clm_f947659527, clm_3528561cb3, clm_53b71a5661, clm_20d0b1fb4f, clm_7783ed6309 · as of 2026-07-17 · ⚠ figures not all matched to the cited claims: 30.0, 70.0\n- CISA-referenced SharePoint versions mapped to exploitation scope and key defenses — from claims clm_f6b0cb6c3b, clm_be05c99c1a, clm_7783ed6309, clm_f48a4c8e57, clm_071668ba4c, clm_c4415ede07, clm_de87c3643d, clm_839f6fd01c, clm_f947659527, clm_3528561cb3, clm_20d0b1fb4f, clm_53b71a5661 · as of 2026-07-17\n\n**Sources**\n- (primary) CISA Urges SharePoint Hardening After New Exploitations — https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations  ·  _read in full · captured 2026-07-18_\n- (primary) Microsoft Security Update Guide — CVE-2026-58644 — https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644  ·  _read in full · captured 2026-07-18_\n\n**Claims, and how far we tracked each down**\n- _[confirmed]_ CISA says multiple SharePoint Server vulnerabilities are being actively exploited in the wild against supported on-premises deployments: SharePoint Server Subscription Edition, 2019, and 2016.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA recommends avoiding direct internet exposure of SharePoint Servers when possible and using a Layer 7 reverse proxy or equivalent application-layer control if exposure is necessary.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ The exploitation path can enable remote code execution and post-exploitation activity on affected SharePoint servers.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA specifically cites stealing IIS machine keys and using deserialization techniques as part of post-exploitation activity that can support persistence and malware deployment.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ Microsoft’s MSRC page marks CVE-2026-58644 as exploited and lists the exploitability assessment as Exploitation Detected.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ Microsoft’s MSRC page says CVE-2026-58644 was publicly disclosed as no and includes FAQ text indicating the vulnerability can be exploited over the network by an attacker authenticated as at least a Site Owner.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA recommends applying Microsoft’s latest patches and security updates, verifying installation, and shortening patch cycles.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA recommends enabling AMSI integration for each SharePoint web application and using Full Mode for request-body scanning where feasible.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA recommends tailored logging, review for anomalous requests, suspicious SharePoint worker-process activity, webshells, and machine-key access.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA recommends hunting for intrusion artifacts before rotating IIS machine keys.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ If SharePoint has to stay exposed, CISA wants it behind a Layer 7 reverse proxy or equivalent application-layer control that requires authentication and can inspect and filter requests.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA added CVE-2026-58644 to the KEV catalog on July 16, 2026, according to the updated advisory.  ·  read in full (as of 2026-07-18)\n- _[likely]_ KEV listing is a severity signal, and for FCEB agencies it also carries a specific remediation clock.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ CISA does not name an actor or malware family, and the sources here do not establish whether the four exploited CVEs are one chain, parallel flaws, or separate parts of a broader wave.  ·  read in full (as of 2026-07-18)\n- _[confirmed]_ The same CISA alert also draws an explicit boundary around at least one newly disclosed SharePoint CVE, saying it is not yet known to have been exploited even though Microsoft identified it as a potential risk if left unpatched.  ·  read in full (as of 2026-07-18)","claims":[{"contradicted_by":[],"grade":"confirmed","id":"clm_745bb927a0","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"}],"text":"In Bank of America’s July Global Fund Manager Survey, 48% of respondents identified AI hyperscaler capital expenditure as the most likely source of a systemic credit event."},{"contradicted_by":[],"grade":"confirmed","id":"clm_b2cc3393b8","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"}],"text":"A record 54% of survey respondents expected a no-landing global economy over the next 12 months, while 39% expected a soft landing and 2% expected a hard landing."},{"contradicted_by":[],"grade":"confirmed","id":"clm_706aaddcff","salience":"low","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"}],"text":"Benzinga’s report said BofA estimated AI-related spending would add 0.3 percentage points to true GDP growth and 0.1 percentage points to measured GDP growth in 2026."},{"contradicted_by":[],"grade":"confirmed","id":"clm_1bc090c912","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"}],"text":"Bank of America’s report described semiconductors as the world’s most crowded trade, with 82% of fund managers selecting long global semiconductors."},{"contradicted_by":[],"grade":"likely","id":"clm_0c7f2b26fb","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"}],"text":"Corporate credit spreads remained relatively tight despite the correction in semiconductor shares, according to the Benzinga summary of market positioning."},{"contradicted_by":[],"grade":"confirmed","id":"clm_950da99527","salience":"medium","sources":[{"published_at":"2026-07-16","publisher":"CNBC","title":"JPM has more upside ahead after its blockbuster earnings report, says Bank of America","url":"https://www.cnbc.com/2026/07/16/jpm-has-more-upside-ahead-after-its-blockbuster-earnings-report-says-bank-of-america.html"}],"text":"JPMorgan’s second-quarter results were described by Bank of America as benefiting from revenue growth tied in part to capital markets activity and AI capex."},{"contradicted_by":[],"grade":"confirmed","id":"clm_48d1c77d5b","salience":"low","sources":[{"published_at":"2026-07-16","publisher":"CNBC","title":"JPM has more upside ahead after its blockbuster earnings report, says Bank of America","url":"https://www.cnbc.com/2026/07/16/jpm-has-more-upside-ahead-after-its-blockbuster-earnings-report-says-bank-of-america.html"}],"text":"JPMorgan’s reported adjusted second-quarter earnings were $6.14 per share on revenue of $52.42 billion."},{"contradicted_by":[],"grade":"confirmed","id":"clm_2793be5ee6","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that Wall Street bankers said AI infrastructure demand is boosting dealmaking and financing activity."},{"contradicted_by":[],"grade":"likely","id":"clm_bfaf10583e","salience":"medium","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that Bank of America extended a $520 million credit line to OpenAI, described as its first loan to the company."},{"contradicted_by":[],"grade":"confirmed","id":"clm_d0474cd7a7","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported that Blackstone’s QTS secured an upsized $3.25 billion leveraged loan for data-center financing."},{"contradicted_by":[],"grade":"confirmed","id":"clm_36f4a410d2","salience":"medium","sources":[{"published_at":"2026-07-16","publisher":"Reuters","title":"Brookfield-backed Csquare valued at $3.24 billion in NYSE debut","url":"https://www.reuters.com/business/brookfield-backed-csquare-valued-324-billion-shares-fall-nyse-debut-2026-07-16/"}],"text":"Reuters reported that Brookfield-backed Csquare debuted on the NYSE with shares trading below the marketed range."},{"contradicted_by":[],"grade":"unconfirmed","id":"clm_6a477bbc17","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Morgan Stanley forecasts about $570 billion in global AI-related debt issuance in 2026."},{"contradicted_by":[],"grade":"unconfirmed","id":"clm_bc7f2aabdd","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Apollo said hyperscaler-bond order coverage fell from nearly five times offered in February to below two times by July."},{"contradicted_by":[],"grade":"unconfirmed","id":"clm_b5c393d90e","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Morgan Stanley’s analysis treated the $1.5 trillion figure as a funding gap, not a debt forecast."},{"contradicted_by":[],"grade":"unconfirmed","id":"clm_62cc410358","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Morgan Stanley estimated an approximately $800 billion private-credit opportunity in data-center financing through 2028."},{"contradicted_by":[],"grade":"likely","id":"clm_1167bd058c","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"},{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"},{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"The available reporting suggests AI infrastructure financing is spreading across public bonds, leveraged loans, private credit, and off-balance-sheet/project-finance structures."},{"contradicted_by":[],"grade":"likely","id":"clm_c9fb688d5b","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Benzinga","title":"Why Fun?","url":"https://www.benzinga.com/markets/tech/26/07/60570926/why-fun"},{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"The available reporting does not yet show a broad market repricing in public credit tied specifically to AI capex risk."},{"contradicted_by":[],"grade":"confirmed","id":"clm_c83b59b875","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that a rush by technology companies to fund AI infrastructure is boosting dealmaking and financing activity for Wall Street, generating fees from capital raising and loans."},{"contradicted_by":[],"grade":"confirmed","id":"clm_79dc263d2a","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters attributed a $520 million credit line to OpenAI to Bank of America and described it as OpenAI's first loan from the bank."},{"contradicted_by":[],"grade":"confirmed","id":"clm_00017dde2a","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters quoted Goldman Sachs CEO David Solomon saying AI infrastructure spending remains in an early, multi-year cycle and that the industry is in the middle of an AI capex super cycle requiring every financing instrument."},{"contradicted_by":[],"grade":"confirmed","id":"clm_bc088887c7","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported Morgan Stanley CEO Ted Pick said 2026 U.S. data-center capex expectations had risen to about $850 billion, from a late-2025 view of $575 billion, with 2027 at $1.3 trillion and 2028 at $1.5 trillion."},{"contradicted_by":[],"grade":"confirmed","id":"clm_2a15e25c2a","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported Bank of America had helped raise nearly $500 billion for AI-related companies since 2025, accounting for 60% of such fundraising across investment-grade debt, leveraged finance, and equity capital markets, according to internal data seen by Reuters."},{"contradicted_by":[],"grade":"confirmed","id":"clm_13b86228cf","salience":"medium","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported JPMorgan was financing data centers and seeing loan demand from companies with indirect AI links, while its CFO said some of that demand was hard to classify as directly AI-related."},{"contradicted_by":[],"grade":"confirmed","id":"clm_bb2630434d","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported QTS wrapped a $3.25 billion seven-year term loan B priced at S+225 with a 0% floor and 99.5 OID."},{"contradicted_by":[],"grade":"confirmed","id":"clm_d771f9b419","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook said the QTS facility was upsized twice from an initial $1 billion launch."},{"contradicted_by":[],"grade":"confirmed","id":"clm_f842f6315e","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported the QTS loan proceeds were to repay existing debt under construction credit facilities, fund a debt service reserve account if needed, and support general corporate purposes."},{"contradicted_by":[],"grade":"confirmed","id":"clm_83724aa44c","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook identified QTS as a data-center operator that builds and operates facilities housing servers supporting cloud computing and AI."},{"contradicted_by":[],"grade":"confirmed","id":"clm_32b11b6263","salience":"medium","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported JPMorgan CFO Jeremy Barnum said some of the loan and capex demand around data centers may be indirectly related to AI and is difficult to classify as directly AI-related."},{"contradicted_by":[],"grade":"confirmed","id":"clm_1e3585e3db","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported QTS's $3.25 billion leveraged loan was upsized twice from an initial $1 billion launch and priced at S+225 with a 0% floor and 99.5 OID."},{"contradicted_by":[],"grade":"confirmed","id":"clm_82652bbc3b","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook said QTS loan proceeds will repay construction credit facilities, fund a debt service reserve account if needed, and support general corporate purposes."},{"contradicted_by":[],"grade":"likely","id":"clm_78a5519a6d","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Utility Dive","title":"AI data center growth could force US utilities to rethink generation plans, BofA says","url":"https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/"}],"text":"Utility Dive's summary of BofA's power-market analysis says the binding constraint is increasingly where power can be delivered, not borrower demand or solvency."},{"contradicted_by":[],"grade":"likely","id":"clm_646fcaafd3","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Utility Dive","title":"AI data center growth could force US utilities to rethink generation plans, BofA says","url":"https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/"}],"text":"Utility Dive reported that more than 7.5 GW of data-center projects with on-site generation are already under construction, with another 60 GW-plus in pre-construction."},{"contradicted_by":[],"grade":"confirmed","id":"clm_dcda82457e","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes' summary says the AI debt story is not a looming crisis and that softer hyperscaler bond demand mainly implies higher borrowing costs, not immediate systemic stress."},{"contradicted_by":[],"grade":"confirmed","id":"clm_024971ec59","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes says Morgan Stanley's $1.5 trillion figure is a funding gap, not a debt forecast."},{"contradicted_by":[],"grade":"confirmed","id":"clm_4cd23d980e","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes says public bond markets are not flashing red and that spreads remain near cycle lows."},{"contradicted_by":[],"grade":"confirmed","id":"clm_2ac0181536","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that Goldman Sachs CEO David Solomon called the AI buildout a multi-year investment cycle and said the industry is in an AI capex super cycle that requires every financing instrument."},{"contradicted_by":[],"grade":"confirmed","id":"clm_42130f5f4a","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that Bank of America extended OpenAI a $520 million credit line and had helped raise nearly $500 billion for AI-related companies since 2025, according to internal data seen by Reuters."},{"contradicted_by":[],"grade":"confirmed","id":"clm_cc0829e60c","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported that QTS closed a $3.25 billion seven-year term loan B at S+225 with a 0% floor and 99.5 original issue discount after the deal was upsized twice from an initial $1 billion launch."},{"contradicted_by":[],"grade":"confirmed","id":"clm_3c2d4a8d9a","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook said QTS's loan proceeds were intended to repay existing construction credit facilities, fund a debt service reserve account if needed, and support general corporate purposes."},{"contradicted_by":[],"grade":"confirmed","id":"clm_cb614d45dc","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Apollo said hyperscaler bond order coverage fell from nearly five times offered in February to below two times by July."},{"contradicted_by":[],"grade":"confirmed","id":"clm_978725e4b9","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes said Morgan Stanley's $1.5 trillion figure is a funding gap, not a debt forecast, and that public bond spreads remain near cycle lows."},{"contradicted_by":[],"grade":"confirmed","id":"clm_2d23911ae3","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Utility Dive","title":"AI data center growth could force US utilities to rethink generation plans, BofA says","url":"https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/"}],"text":"Utility Dive, summarizing Bank of America analysis, said the market is constrained by where power can actually be delivered rather than by demand alone."},{"contradicted_by":[],"grade":"confirmed","id":"clm_cef04a959f","salience":"low","sources":[{"published_at":"2026-07-17","publisher":"Reuters","title":"Global equity funds draw inflows for the eighth week on earnings optimism","url":"https://www.reuters.com/business/finance/global-markets-flows-graphic-2026-07-17/"}],"text":"Reuters reported that global equity funds attracted inflows for an eighth consecutive week through July 15, a sign of continuing risk appetite in broader markets."},{"contradicted_by":[],"grade":"confirmed","id":"clm_4e0740d13c","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Goldman Sachs CEO David Solomon said the buildout is still in its early stages and called it an AI capex super cycle that requires every financing instrument."},{"contradicted_by":[],"grade":"confirmed","id":"clm_f6365e3173","salience":"medium","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that JPMorgan is financing data centers and seeing loan demand from companies with indirect AI links."},{"contradicted_by":[],"grade":"confirmed","id":"clm_6be34947d8","salience":"medium","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"}],"text":"Reuters reported that JPMorgan CFO Jeremy Barnum said some of that demand may not be AI-related and is hard to classify as directly AI-related."},{"contradicted_by":[],"grade":"confirmed","id":"clm_beff635d58","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook reported that QTS closed a $3.25 billion seven-year term loan B at S+225, with a 0% floor and 99.5 original issue discount, after the deal was upsized twice from an initial $1 billion launch."},{"contradicted_by":[],"grade":"confirmed","id":"clm_6e7aa6848b","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook said the QTS loan proceeds would repay existing debt under construction credit facilities, fund a debt service reserve account if needed, and support general corporate purposes."},{"contradicted_by":[],"grade":"confirmed","id":"clm_ee40c7d9a7","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"}],"text":"PitchBook identified QTS as a data-center operator that builds and operates facilities supporting cloud computing and AI."},{"contradicted_by":[],"grade":"confirmed","id":"clm_378da35349","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes said Morgan Stanley’s $1.5 trillion figure is a funding gap, not a debt forecast."},{"contradicted_by":[],"grade":"confirmed","id":"clm_b43cbb3694","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes said public bond spreads remain near cycle lows."},{"contradicted_by":[],"grade":"confirmed","id":"clm_328b85fd7a","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Forbes reported that Apollo said hyperscaler bond order coverage fell from nearly five times the amount offered in February to below two times by July."},{"contradicted_by":[],"grade":"confirmed","id":"clm_cb00a82718","salience":"high","sources":[{"published_at":"2026-07-17","publisher":"Utility Dive","title":"AI data center growth could force US utilities to rethink generation plans, BofA says","url":"https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/"}],"text":"Utility Dive, summarizing Bank of America analysis, said the market is constrained by where power can actually be delivered, not just by demand."},{"contradicted_by":[],"grade":"confirmed","id":"clm_7a8cf58b82","salience":"medium","sources":[{"published_at":"2026-07-17","publisher":"Utility Dive","title":"AI data center growth could force US utilities to rethink generation plans, BofA says","url":"https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/"}],"text":"Utility Dive said more than 7.5 gigawatts of data-center projects with on-site generation are already under construction, with another 60 gigawatts-plus in pre-construction."},{"contradicted_by":[],"grade":"likely","id":"clm_68453a1b3e","salience":"high","sources":[{"published_at":"2026-07-14","publisher":"Reuters","title":"Wall Street banks see AI 'super cycle' set to boost deals, financing","url":"https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/"},{"published_at":"2026-07-17","publisher":"PitchBook","title":"Blackstone’s QTS secures upsized $3.25B leveraged loan","url":"https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan"},{"published_at":"2026-07-17","publisher":"Forbes","title":"Bond Investors Push Back As AI Debt Heads Toward $570 Billion","url":"https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/"}],"text":"Available reporting suggests AI infrastructure financing is spreading across public bonds, leveraged loans, private credit, and off-balance-sheet/project-finance structures."}],"sources":["https://www.benzinga.com/markets/tech/26/07/60570926/why-fun","https://www.cnbc.com/2026/07/16/jpm-has-more-upside-ahead-after-its-blockbuster-earnings-report-says-bank-of-america.html","https://www.reuters.com/legal/transactional/wall-street-banks-see-ai-super-cycle-set-boost-deals-financing-2026-07-14/","https://pitchbook.com/news/articles/blackstones-qts-secures-upsized-3-25b-leveraged-loan","https://www.reuters.com/business/brookfield-backed-csquare-valued-324-billion-shares-fall-nyse-debut-2026-07-16/","https://www.forbes.com/sites/robertszczerba/2026/07/17/bond-investors-push-back-as-ai-debt-heads-toward-570-billion/","https://www.utilitydive.com/news/ai-data-center-growth-utilities-generation-plans/825541/","https://www.reuters.com/business/finance/global-markets-flows-graphic-2026-07-17/"],"corrections":[],"how_to_cite":"Cite the article URL and the claim id. Grades are Ohmega's assessment of each claim as of the date shown, not a guarantee. Source texts belong to their publishers.","cite_as":"https://ohmega.monster/articles/cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d","api_url":"https://ohmega.monster/api/v1/articles/cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d","data_url":"https://ohmega.monster/data/articles/cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d.json"},"meta":{"as_of":"2026-07-17","source":"ohmega.article/1","version":"v1","cite_as":"https://ohmega.monster/articles/cisa-warns-sharepoint-server-subscription-edition-2019-and-2-1d951d","license":"Ohmega claims, summaries, grades, Pulses and forecasts may be quoted with a link to cite_as. Source texts belong to their publishers; follow the source URLs. No warranty: readings are our assessment as of as_of, not guarantees.","verification":"blocked","note":"claims[] (when present) carry grade: confirmed, likely, contested, unconfirmed/speculative (a lead, not established), opinion (attributed). Grades are our assessment as of as_of."}}