TechRepublic

Microsoft Used China-Based Engineers to Maintain Vulnerable SharePoint

Microsoft used an engineering team based in China to support SharePoint before its vulnerabilities were patched. The application was exploited by at least three state-sponsored Chinese threat groups ...
ProPublica

Microsoft Used China-Based Engineers to Support Product Recently Hacked by China

ProPublica is a nonprofit newsroom that investigates abuses of power. Sign up to receive our biggest stories as soon as they’re published. Last month, Microsoft announced that Chinese state-sponsored ...
Computerworld

Again? Microsoft hit for poor security in major SharePoint hack

The company has been called out repeatedly for inadequate security practices, and now we have another case in point: a successful SharePoint hack that’s among the worst in Microsoft’s history. Once ...
Reuters

More than 90 state, local governments targeted using Microsoft SharePoint vulnerability, group says

July 30 (Reuters) - More than 90 state and local governments have been targeted using the recently revealed vulnerability in Microsoft server software, according to a U.S. group devoted to helping ...
CRN

Microsoft Says SharePoint Attacks Now Include Ransomware

A China-linked threat actor has been observed exploiting SharePoint servers to deliver ransomware, according to Microsoft researchers, in the latest sign of worsening impacts from the widespread ...
Computer Weekly

SharePoint users hit by Warlock ransomware, says Microsoft

Multiple organisations have now been hit by Warlock ransomware deployed on their systems via the dangerous ToolShell vulnerability chain in Microsoft SharePoint Server, Microsoft has revealed. Earlier ...
TechCrunch

Hundreds of organizations breached by SharePoint mass-hacks

Security researchers say hackers have breached at least 400 organizations by exploiting a zero-day vulnerability in Microsoft SharePoint, signaling a sharp rise in the number of detected compromises ...
Ars Technica

What to know about ToolShell, the SharePoint threat under mass exploitation

Government agencies and private industry have been under siege over the past four days following the discovery that a critical vulnerability in SharePoint, the widely used document-sharing app made by ...
Forbes

Microsoft Ties SharePoint Exploits To China-Backed ToolShell Group

China-linked hackers are exploiting a critical SharePoint flaw to deploy ToolShell malware, bypassing patches and compromising organizations across key sectors. Microsoft has linked a wave of ...
9to5Mac

US agency responsible for nuclear weapons was breached in Sharepoint hack [U]

More than 10,000 organizations around the world are at risk from hackers after a serious security flaw was discovered in Microsoft’s popular Sharepoint platform, used to store and share confidential ...
Engadget

US nuclear weapons agency breached using Microsoft SharePoint hack

The US government agency in charge of designing and maintaining nuclear weapons was among those breached by a hack of Microsoft's SharePoint server software, Bloomberg reported. However, attackers ...
Reuters

Microsoft knew of SharePoint security flaw but failed to effectively patch it, timeline shows

LONDON, July 22 (Reuters) - A security patch Microsoft (MSFT.O), opens new tab released this month failed to fully fix a critical flaw in the U.S. tech giant's SharePoint server software, opening the ...