SharePoint, Microsoft and Hackers
Digest more
Microsoft blamed two Chinese nation-state actors for exploiting recently discovered security flaws in SharePoint to infiltrate vulnerable organizations, like schools, state governments, and the U.S. government’s top nuclear security agency.
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The researcher said he picked the name because it exploited ToolPane.aspx, a component for assembling the side panel view in the SharePoint user interface.
Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”
Over 100 organizations were hacked via a SharePoint flaw. Governments and businesses targeted in a major Microsoft server breach.
Patches have been issued for two versions of Microsoft’s SharePoint software, while one version remains vulnerable.
A China-based hacking group is deploying Warlock ransomware on Microsoft SharePoint servers vulnerable to widespread attacks targeting the recently patched ToolShell zero-day exploit chain.
A newly discovered vulnerability in Microsoft’s SharePoint platform has spurred a mad frenzy from hackers — leading to breaches of some Microsoft clients.
Microsoft identified three China-based hacking groups targeting SharePoint vulnerabilities in the ongoing cyberattack, and urged customers to ensure they've applied security updates.