MICROSOFT WARNS BUSINESSES AND GOVERNMENTS OF SERVER SOFTWARE CYBERATTACKS

Mon 21 July 2025:

Microsoft warned of ongoing cyberattacks targeting server software used by government agencies and businesses for internal document sharing, urging customers to apply security updates immediately.

The FBI acknowledged the attacks on Sunday, stating it is collaborating with federal and private sector partners but provided no further details.

In an alert issued Saturday, Microsoft (MSFT) said the vulnerabilities apply only to SharePoint servers used within organizations. It said SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the attacks.

“We’ve been coordinating closely with CISA, DOD Cyber Defense Command and key cybersecurity partners globally throughout our response,” a Microsoft spokesperson said, adding that the company had issued security updates and urged customers to install them immediately.

__________________________________________________________________________

https://whatsapp.com/channel/0029VaAtNxX8fewmiFmN7N22

__________________________________________________________________________

The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted US and international agencies and businesses.

The hack is known as a “zero day” attack because it targeted a previously unknown vulnerability, the newspaper said, quoting experts. Tens of thousands of servers were at risk.

In the alert, Microsoft said that a vulnerability “allows an authorized attacker to perform spoofing over a network.” It issued recommendations to stop the attackers from exploiting it.

In a spoofing attack, an actor can manipulate financial markets or agencies by hiding the actor’s identity and appearing to be a trusted person, organization or website.

Earlier, Microsoft said it is working on updates to 2016 and 2019 versions of SharePoint. If customers cannot enable recommended malware protection, they should disconnect their servers from the internet until a security update is available, it added.

SOURCE: INDEPENDENT PRESS AND NEWS AGENCIES

__________________________________________________________________________

FOLLOW INDEPENDENT PRESS:

WhatsApp CHANNEL
https://whatsapp.com/channel/0029VaAtNxX8fewmiFmN7N22