Microsoft, SharePoint
Digest more
Microsoft blamed two Chinese nation-state actors for exploiting recently discovered security flaws in SharePoint to infiltrate vulnerable organizations, like schools, state governments, and the U.S. government’s top nuclear security agency.
Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.
A cyber-espionage campaign centred on vulnerable Microsoft software now involves the deployment of ransomware.
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
The U.S. government agency that maintains and designs America's nuclear weapons was reportedly breached by attackers exploiting zero-day flaws in on-premises
2d
Asianet Newsable on MSNUS Nuclear Weapons Agency Reportedly Hit In Microsoft ‘Zero-Day’ Breach — DOE Says Impact Was MinimalProviding additional updates on the breach, Microsoft said in a blog post on Tuesday that two Chinese nation-state operators, Linen Typhoon and Violet Typhoon, exploited vulnerabilities in the internet-facing SharePoint servers.