Thursday, July 24, 2025
No menu items!

Microsoft alerts businesses, governments to server software attack

Must Read

Write an article about Microsoft said the vulnerabilities apply only to SharePoint servers used within organisations. (AP pic)
WASHINGTON: Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organisations, and it recommended security updates that customers should apply immediately.

The FBI on Sunday said it is aware of the attacks and is working closely with its federal and private-sector partners but offered no other details.

In an alert issued on Saturday, Microsoft said the vulnerabilities apply only to SharePoint servers used within organisations. It said that SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the attacks.

The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted US and international agencies and businesses.

The hack is known as a “zero-day” attack because it targeted a previously unknown vulnerability, the newspaper said, quoting experts. Tens of thousands of servers were at risk.

Microsoft did not immediately respond to a request for comment.

In the alert, Microsoft said that a vulnerability “allows an unauthorised attacker to perform spoofing over a network”. It issued recommendations to stop the attackers from exploiting it.

In a spoofing attack, an actor can manipulate financial markets or agencies by hiding the actor’s identity and appearing to be a trusted person, organisation or website.

Microsoft said on Sunday it issued a security update for SharePoint Subscription Edition, which it said customers should apply immediately.

It said it is working on updates to 2016 and 2019 versions of SharePoint. If customers cannot enable recommended malware protection, they should disconnect their servers from the internet until a security update is available, it said.

in 1000-1500 words .Organize the content with appropriate headings and subheadings (h1, h2, h3, h4, h5, h6), Retain any existing tags from MicrosoftMicrosoft said the vulnerabilities apply only to SharePoint servers used within organisations. (AP pic)
WASHINGTON: Microsoft has issued an alert about “active attacks” on server software used by government agencies and businesses to share documents within organisations, and it recommended security updates that customers should apply immediately.

The FBI on Sunday said it is aware of the attacks and is working closely with its federal and private-sector partners but offered no other details.

In an alert issued on Saturday, Microsoft said the vulnerabilities apply only to SharePoint servers used within organisations. It said that SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the attacks.

The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted US and international agencies and businesses.

The hack is known as a “zero-day” attack because it targeted a previously unknown vulnerability, the newspaper said, quoting experts. Tens of thousands of servers were at risk.

Microsoft did not immediately respond to a request for comment.

In the alert, Microsoft said that a vulnerability “allows an unauthorised attacker to perform spoofing over a network”. It issued recommendations to stop the attackers from exploiting it.

In a spoofing attack, an actor can manipulate financial markets or agencies by hiding the actor’s identity and appearing to be a trusted person, organisation or website.

Microsoft said on Sunday it issued a security update for SharePoint Subscription Edition, which it said customers should apply immediately.

It said it is working on updates to 2016 and 2019 versions of SharePoint. If customers cannot enable recommended malware protection, they should disconnect their servers from the internet until a security update is available, it said.

and integrate them seamlessly into the new content without adding new tags. Include conclusion section and FAQs section at the end. do not include the title. it must return only article i dont want any extra information or introductory text with article e.g: ” Here is rewritten article:” or “Here is the rewritten content:”

Latest News

Govt to unveil ‘proactive measures’ for semiconductor sector

Write an article about Govt to unveil ‘proactive measures’ for semiconductor sector .Organize the content with appropriate headings and...

More Articles Like This