Skip to main content

Microsoft warns businesses, governments of ongoing server software cyberattack

Microsoft has issued a warning about ongoing cyberattacks
Microsoft has issued a warning about ongoing cyberattacks targeting server software used by government agencies and businesses for internal document sharing. The company urged users to immediately install recommended security updates.

In a Saturday alert, Microsoft clarified that the attacks are limited to on-premises SharePoint servers and do not affect SharePoint Online through Microsoft 365's cloud services.

The FBI confirmed on Sunday that it is aware of the situation and is collaborating with federal and private-sector partners, though it did not disclose further details.

The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted U.S. and international agencies and businesses.

The hack is known as a "zero day" attack because it targeted a previously unknown vulnerability, the newspaper said, quoting experts. Tens of thousands of servers were at risk.

Microsoft did not immediately respond to a request for comment.

In the alert, Microsoft said that a vulnerability "allows an authorised attacker to perform spoofing over a network." It issued recommendations to stop the attackers from exploiting it.

In a spoofing attack, an actor can manipulate financial markets or agencies by hiding the actor's identity and appearing to be a trusted person, organisation or website.

Microsoft said on Sunday it issued a security update for SharePoint Subscription Edition, which it said customers should apply immediately.

It said it is working on updates to the 2016 and 2019 versions of SharePoint.

If customers cannot enable recommended malware protection, they should disconnect their servers from the internet until a security update is available, it said.

Comments

Popular posts from this blog

Army chief assures business community of ‘complete support’ for economic uplift

Chief of Army Staff Gen Qamar Javed Bajwa on Wednesday assured the business community of the army’s “complete support” for the economic uplift of the country. He made this assurance during a meeting with businessmen who called on him at the General Headquarters today, according to a statement by the military’s media affairs wing. A delegation of the Federation of Pakistan Chambers of Commerce & Industry (FPCCI) and the army chief discussed the “evolving regional economic environment” as well as the FPCCI’s role in the development of commercial and industrial hubs in Pakistan, the Inter-Services Public Relations (ISPR) said. During the meeting, Gen Bajwa appreciated the role of the business community in the economic uplift of the country and affirmed all-out support of the army in this regard. The delegation, meanwhile, acknowledged the Pakistan Army’s role and sacrifices in the provision of a "secure enabling environment" for economic prosperity in the country, acco...

3rd U-19 Women T20: South Africa beat Pakistan by 52 runs

In the third T20 of the five-match series in Karachi, South Africa Under-19 women's team defeated Pakistan Under-19 women's team by 52 runs tonight. Batting first, South Africa Under-19 women's team scored 158 runs for the loss of six wickets in allotted 20 overs. In reply, Pakistan Under-19 women's team were all out for 106 runs in 18 overs. South Africa lead the series 2-1.

IRGC says armed forces prepared for all scenarios amid heightened military readiness

The Islamic Revolution Guards Corps (IRGC) says Iran's armed forces are better prepared than before and are fully ready for any future contingency, asserting that any return by the enemy to military aggression will be met with different operational approaches. Spokesman Brigadier General Hossein Mohebbi credited both existing capabilities and experience gained through direct confrontation with the enemy for the enhanced position, Fars News Agency reported on Tuesday. "If the enemy returns to the military arena, the nature of the operations, the geography of the battlefield, and even the types of weapons used will be different," he said. "The IRGC is fully prepared for all possible scenarios." 'Capabilities increased during ceasefire' The IRGC official also said Iran has used the ceasefire period to strengthen its military readiness and repair damage. "The reality is that during the ceasefire period, our military and operational capabilities inc...