Edith Hejberg
As investigations continue in the U.S., Canada, and Australia, additional victims are being identified
Microsofts SharePoint has been hacked, this has resulted in major servers being at risk. Including U.S Government servers and servers at major universities.
Microsoft SharePoint Hack Hits Global Targets
A newly discovered vulnerability in Microsoft’s SharePoint software has triggered a global cybersecurity crisis, affecting U.S. federal and state agencies, universities, energy firms, and an Asian telecom company. The flaw allowed unknown hackers to breach systems used to store and share sensitive information.
A Critical “Zero-Day” Vulnerability
The attackers exploited a so-called “zero-day” vulnerability, a flaw previously unknown to Microsoft, leaving tens of thousands of SharePoint servers at risk.
Until recently, no patch existed, forcing organizations worldwide into emergency response mode.
Patch Partially Released, But Many Remain Exposed
Microsoft released a patch late Sunday for one affected SharePoint version, but two others remain unprotected.
The company recommended temporary workarounds, including disconnecting servers from the internet, while it works on further fixes.
Breaches Include U.S. Government, Universities, and Energy Firms
Researchers have confirmed compromises at multiple U.S. federal agencies, a state legislature in the eastern U.S., and over 50 other entities. including European governments, a major energy company, and academic institutions.
Attackers Stole Keys Enabling Repeated Access
Security experts warn that hackers may have stolen cryptographic keys during the attacks, allowing them to re-enter systems even after patches are applied.
This raises the stakes for affected organizations, many of which may already be compromised.
Evidence of Wiper Attacks Raises Alarm
In at least one case, attackers hijacked a public document repository operated by a U.S. state agency.
Officials say the material is now inaccessible, sparking fears of a rare “wiper” attack where data may have been deleted or rendered permanently unavailable.
Cybersecurity Firms Scramble to Contain the Threat
Companies like CrowdStrike, Palo Alto Networks, and Eye Security are tracking the campaign, which one expert called a “significant vulnerability” affecting thousands of servers.
In Arizona, state, tribal, and local leaders have begun coordinating an emergency response.
CISA Races to Alert Victims Despite Resource Cuts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) sprang into action after being alerted last Friday.
But with budget cuts slashing its threat-response team by 65%, it took six hours Saturday night to notify around 100 potentially compromised organizations, including schools and universities.
Microsoft Faces Renewed Scrutiny Over Security Lapses
The company has been criticized for narrowly scoped patches and past breaches over the last few years. Many people voice their worries and distrust in the patches.
Global Fallout Still Unfolding
As investigations continue in the U.S., Canada, and Australia, additional victims are being identified.
Global problems have also hit Spanish government agency and a university in Brazil. Experts say it’s too early to tell who’s behind the campaign or what their ultimate goal may be, but the scale and sophistication are already sparking international concern.
