According to the company, Chinese “threat actors” have compromised Microsoft’s SharePoint document software servers and targeted the data of companies that use them. According to reports, China-based Storm-2603 and state-backed Linen and Violet Typhoon “exploited vulnerabilities” in on-premises SharePoint servers, the type that businesses employ, but not in its cloud-based service.
In response, the US tech behemoth issued security patches and recommended that all users of on-premises SharePoint servers install them. Microsoft added in a statement that it is still investigating additional individuals who may be exploiting similar flaws.
According to the company, there was “high confidence” that the hackers would keep targeting computers that did not have its security patches installed. It also stated that as its inquiry progresses, it would provide additional details to its blog.
When hackers issued a request to a SharePoint server, Microsoft claimed to have seen assaults that “enabled the theft of the key material by threat actors.” Google Cloud subsidiary Mandiant Consulting’s business chief technology officer, Charles Carmakal, told the BBC that the company was “aware of several victims in several different sectors across a number of global geographies.
Also Read:
For The first Time, Netflix Uses AI Effects to Save Expenses
A Blast kills Three Deputies at The Los Angeles Sheriff’s Office