institutional access

You are connecting from
Lake Geneva Public Library,
please login or register to take advantage of your institution's Ground News Plan.

Published loading...Updated

Microsoft server hack has now hit 400 victims, researchers say

UNITED STATES, JUL 23 – Chinese state-sponsored hackers exploit unpatched Microsoft SharePoint flaws to deploy ransomware and steal data, rapidly increasing victims to over 400, including key U.S. government agencies.

  • About 400 organisations have fallen victim to a campaign exploiting unpatched Microsoft SharePoint servers, Eye Security said, highlighting widespread vulnerability and ongoing threats.
  • Ronen Ahdut identified two vulnerabilities in Microsoft SharePoint servers, CVE-2025-53770 and CVE-2025-53771, exploited by Chinese threat actors, according to Cynet Security.
  • Eye Security said the figure is likely an undercount, Vaisha Bernard warned `There are many more, because not all attack vectors have left artifacts that we could scan for`,
  • On July 24, 2025, Microsoft confirmed that Storm-2603 is deploying Warlock ransomware via the exploit, urging immediate patch application to protect on-premises SharePoint environments.
  • With a public exploit now available, automated attacks against unpatched systems are set to grow, increasing risk of widespread disruption, as CISA explained that `ToolShell provides unauthenticated access to systems` and `enables malicious actors to fully access SharePoint content… and execute code over the network`.
Insights by Ground AI
Does this summary seem wrong?
Podcasts & Opinions

53 Articles

Center

Microsoft alerts about a security flaw in its SharePoint software, exploited by Chinese hackers to access sensitive data Several groups of Chinese hackers have exploited a

·France
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 57% of the sources are Center
57% Center

Factuality 

To view factuality data please Upgrade to Premium

Ownership

To view ownership data please Upgrade to Vantage

Bloomberg broke the news in United States on Wednesday, July 23, 2025.
Sources are mostly out of (0)