Kathrine Frich
So far, Microsoft has not been able to fully fix the issue.
So far, Microsoft has not been able to fully fix the issue.
U.S. Government Systems Hacked Through Microsoft Glitch
A major cybersecurity incident has rocked the United States, as an unknown hacker group exploited a critical flaw in Microsoft’s SharePoint platform.
The breach has affected state and federal agencies, universities, and major corporations, including energy firms and a telecommunications provider in Asia.
The Breach Is Ongoing
The attack began several days ago and is still active, according to investigators.
The vulnerability was found in SharePoint, Microsoft’s widely used software for document sharing and collaboration.
So far, Microsoft has not been able to fully fix the issue.
A Global Target: Not Just the U.S.
While U.S. and Canadian government systems have been hit hard, the breach has extended beyond North America.
Victims include academic institutions, private companies in the energy sector, and a major Asian telecom firm, highlighting the global scale of the attack.
Data Theft and Password Risks
Experts warn that this type of security breach could lead to the theft of sensitive documents and widespread credential harvesting.
Confidential information and passwords stored or shared through compromised SharePoint servers may now be at risk.
Microsoft Scrambles to Respond
Initially, Microsoft advised users to either disconnect their SharePoint servers from the internet or modify their systems.
A patch was released Sunday night, but only for one version of the software.
Two other versions remain exposed, and the company says it is still working on a complete fix.
A “Zero-Day” Attack, But Cloud Systems Are Safe
The attack has been classified as a “Zero-Day” exploit, meaning it used a previously unknown vulnerability.
Fortunately, Microsoft 365 and other cloud-based services were not affected. Only on-premises SharePoint servers have been compromised so far.
Governments Act Urgently
U.S. and Canadian agencies are moving quickly to protect potentially tens of thousands of exposed servers.
Emergency protocols have been activated to contain the damage and prevent further intrusions.
Microsoft’s Track Record Under Fire
This is not the first time Microsoft’s security has come under scrutiny.
In 2023, a U.S. government panel sharply criticized the company after a Chinese-led hacking campaign compromised sensitive government emails through Microsoft systems.
