Kevin Collier is a reporter covering cybersecurity, privacy and technology policy for NBC News.
A newly discovered critical flaw in Microsoft’s SharePoint platform has spurred a mad frenzy from hackers — including some working for the Chinese government, Google and Microsoft say. The identities of which organizations have been hacked are still not public, but they are increasing and include multiple government agencies around the world, Charles Carmakal, the chief technology officer at Mandiant, Google’s cloud security service, told NBC News.
The incident echoes one in 2021, when a flaw in another Microsoft product, the email program Exchange, allowed a similar mad dash of hacking. In that case, the U.S. formally accused China of snooping on government emails, but a review board also blamed Microsoft for allowing it to happen. In a blog post published Tuesday morning, Microsoft said at least three Chinese hacking groups, two of which are associated with Chinese intelligence, have been exploiting the flaw. The U.S.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Microsoft says Chinese hacking groups are behind SharePoint attacksSome of the attacks that targeted organizations via an exploit in Microsoft’s SharePoint server platform have been linked to China-affiliated hacking groups.
Read more »
The Wiretap: Chinese Hackers Exploit Microsoft Sharepoint 0-Day, Google WarnsChina-linked group said to target Microsoft Sharepoint flaw, now patched.
Read more »
Microsoft says Chinese hacking groups exploited SharePoint vulnerability in attacksTwo Chinese nation-state actors and one China-based threat actor have tried to exploit the vulnerability for weeks, Microsoft said.
Read more »
Microsoft publishes emergency patches for its SharePoint software amid attacksMicrosoft has pushed emergency security patches for SharePoint amid an exploit that targets the file management and intranet software.
Read more »
Microsoft Issues Alert After Critical SharePoint Server AttacksMicrosoft warned of active zero-day attacks on SharePoint servers used by government and businesses, with FBI investigating.
Read more »
Microsoft alerts businesses and governments to attacks on SharePoint serversMicrosoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organizations and recommended security updates that customers should apply immediately.
Read more »