Microsoft SharePoint servers are attacked

Snements took advantage of the weaknesses in the SharePoint program in Microsoft, putting tens of thousands of local servers used by international companies and agencies in danger. Microsoft issued an alert on Saturday Detecting that she was aware of “active attacks”, and that she was working to correct the exploitation of zero day.

Researchers in Eye security was identified for the first time On July 18, which allows infiltrators to reach some local versions of SharePoint and steal keys that can allow them to impersonate users or services even after restarting or correcting the server. This means that already hacked servers may still pose a threat to companies, but SharePoint clouds are not vulnerable to exploitation and are not affected.

Cross can use a zero day to steal sensitive data, password bridges, and to move through the penetrated network through services that are often connected to SharePoint, including Outlook, difference, and OneDrive. It seems that exploitation Arose From a mixture of two errors made in the PWN2OWN piracy in May, allowing the uninfected access to SharePoint servers.

Microsoft I released spots To the “SharePoint 2019” and the subscription servers in SharePoint, and the company is Work actively On SharePoint 2016.

the Cyber Security Agency and US Infrastructure (CISA) says that the range of attacks and their effect is still evaluated, and that any servers are affected by exploitation must be separated from the Internet in order to have an official accuracy. The exploitation was used to attack federal agencies, US government agencies, universities, energy companies and Asian Etisalat, the Washington Post I mentioned, quoting state officials and private sector researchers.