Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows

Tally of Microsoft victims surges to 400 as hackers exploit SharePoint flaw

The number of companies and organizations compromised by a security vulnerability in Microsoft Corp.'s SharePoint servers is increasing rapidly, with the tally of victims soaring more than six-fold in a few days, according to one research firm.

Microsoft says some SharePoint server hackers now using ransomware

Spy campaign began after Microsoft failed to fully patch a security hole in its SharePoint server software.

Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage

Multiple hacking groups—including state actors from China—have targeted a vulnerability in older, on-premises versions of the file-sharing tool after a flawed attempt to patch it.

Microsoft identifies Chinese hacking groups behind persistent SharePoint server attacks

Tech giant Microsoft on Tuesday said that three groups of China-based hackers were behind an ongoing cyberattack on its SharePoint file-sharing system.The Microsoft Security Response Center first published a blog about the attack against on-premises SharePoint servers on July 19, explaining that the attackers exploited vulnerabilities related to spoofing and remote code execution. SharePoint is a document-sharing platform that aims to allow user…

What to know about ToolShell, the SharePoint threat under mass exploitation

Government agencies and private industry have been under siege over the past four days following the discovery that a critical vulnerability in SharePoint, the widely used document-sharing app made by Microsoft, is under mass exploitation. Since that revelation, the fallout and the ever-increasing scope of the attacks have been hard to keep track of. What follows are answers to some of the most common questions about the vulnerability and the on…

Microsoft Server Hack Likely Single Actor, Over 8,000 Firms Hit

A global attack on Microsoft server software used by thousands of government agencies and businesses to share documents within organisations is likely the work of a single actor, a cybersecurity researcher said on Monday.