Microsoft fixes 2 SharePoint zero-days under attack
Digest more
A series of cyberattacks targeting Microsoft collaboration software, specifically SharePoint, have been linked to Chinese hackers and threat actors.
Microsoft has released security updates addressing the exploited vulnerabilities and urged all customers to apply patches without delay.
One of the hacked organizations reportedly includes the U.S. agency responsible for maintaining the country's stockpile of nuclear weapons. China-backed hackers have been observed carrying out the hacks targeting SharePoint servers.
Microsoft said it identified 2 groups as leveraging flaws in SharePoint software; China said it firmly opposes all forms of cyberattacks.
A new vulnerability dubbed ToolShell is being used to compromise on-premise instances of Microsoft SharePoint servers. Attacks have ranged from highly targeted to opportunistic based on the value of the company operating the server.
Explore more
The hackers behind the initial wave of attacks exploiting a zero-day in Microsoft SharePoint servers have so far primarily targeted government organizations, according to researchers as well as news reports.