US Edition
Microsoft server hack has now hit 400 victims, researchers say
UNITED STATES, JUL 23 – Chinese state-sponsored hackers exploit unpatched Microsoft SharePoint flaws to deploy ransomware and steal data, rapidly increasing victims to over 400, including key U.S. government agencies.
- Microsoft confirmed that the China-based group Storm-2603 began deploying Warlock ransomware via vulnerable on-premises SharePoint servers starting July 18, 2025.
- The attacks exploited a zero-day vulnerability chain known as ToolShell, which includes critical flaws CVE-2025-53770 and CVE-2025-53771 that allow remote code execution and bypass security protections.
- Storm-2603 uses tools like Mimikatz to steal credentials and moves laterally across networks by modifying Group Policy Objects to distribute ransomware across compromised systems.
- More than 400 organizations, including US federal agencies such as the Department of Energy and the National Nuclear Security Administration, have been compromised in four waves of attacks.
- Microsoft urges immediate patching of affected SharePoint versions and following mitigation guidance, warning that threat actors will continue exploiting unpatched on-premises servers.
Insights by Ground AI
Does this summary seem wrong?
61 Articles
61 Articles
Microsoft alerts about a security flaw in its SharePoint software, exploited by Chinese hackers to access sensitive data Several groups of Chinese hackers have exploited a
·France
Read Full Article
Microsoft SharePoint attacks ensnare 400 victims, including federal agencies
The fallout from an attack spree targeting defects in on-premises Microsoft SharePoint servers continues to spread nearly a week after zero-day exploits were discovered, setting off alarms across the globe. More than 400 organizations have been actively compromised across four waves of attacks, according to Eye Security. Multiple government agencies, including the Departments of Energy, Homeland Security and Health and Human Services, have been …
Coverage Details
Total News Sources61
Leaning Left6Leaning Right6Center14Last UpdatedBias Distribution54% Center
Bias Distribution
- 54% of the sources are Center
54% Center
L 23%
C 54%
R 23%
Factuality
To view factuality data please Upgrade to Premium
