Microsoft is still mitigating “active attacks” on its SharePoint software used by U.S. government agencies and businesses
Igor Golovniov/SOPA Images/LightRocket via Getty Images
Microsoft $MSFT’s SharePoint collaboration tools have faced widespread attacks over the last few days, impacting U.S. federal and state agencies, universities, energy companies, and an Asian telecommunications company, state officials and researchers told the Washington Post.
Microsoft said Sunday evening it's still mitigating “active attacks” affecting on-premises SharePoint servers. It said attackers are “exploiting vulnerabilities partially addressed by the July Security Update.” The hackers' identities are still unknown, the outlet reported.
Experts are referring to this latest hack on Microsoft's collaboration tools as a “zero-day” attack because it “targeted a previously unknown vulnerability,” impacting tens of thousands of servers, the Post reported.
Microsoft released security updates that it said “fully protect” customers using SharePoint Subscription Edition and SharePoint 2019. There is no update for its SharePoint Server 2016 yet. The company said SharePoint Online in Microsoft 365 wasn’t impacted by the hack.
The FBI said in a statement in regards to the hack, “We are working closely with our federal government and private sector partners,” the Post reported.
Read more: The 10 worst data breaches in history
This attack comes just days after ProPublica released an investigation where it discovered Microsoft is using Chinese engineers “to help maintain the Defense Department’s computer systems” with “minimal supervision” from U.S. workers with security clearances, making it vulnerable to cyberattacks — like this one.
While cyberattacks aren’t unique to Microsoft, the company sure faces a lot of them. After multiple attacks over the years from international hackers with ties to foreign governments, the U.S. Cyber Safety Review Board released a scathing report last year that said a “cascade of security failures” was to blame for the company’s series of cyberattacks, including an attack last January. It also found that Microsoft could have stopped Chinese state actors from hacking government emails in 2023.
“We acknowledge that we can and must do better, and we apologize and express our deepest regrets to those who have been impacted,” Microsoft President Brad Smith said in a prepared testimony last year to the House Homeland Security Committee following the released cybersecurity report.
—Laura Bratton and Britney Nguyen contributed to this article.
Join 500,000+ readers who start their day with Quartz.
By subscribing, you agree to our Terms of Service and Privacy Policy.
