|
Microsoft SharePoint Attacks: What to Know
|
|
|
|
PHOTO: GONZALO FUENTES/REUTERS
|
|
|
Two vulnerabilities in Microsoft’s SharePoint software provide entry points for hackers to take over the systems. Microsoft's Security Response Center said in a blog post over the weekend that the attacks target on-premise SharePoint server customers and exploit vulnerabilities that were partially addressed by a July security update. Cloud-based SharePoint instances aren't affected, the company said. (WSJ)
|
|
|
-
By Monday, cybersecurity investigators said that the SharePoint attacks were widespread. At least one of the “multiple” hacking groups involved in the attacks was linked to China, according to Google’s Mandiant cybersecurity group.
-
Customers should disconnect their on-premises SharePoint servers from the internet until they can properly apply fixes, the Cybersecurity and Infrastructure Security Agency warned.
-
The U.K. National Cyber Security Centre said "a limited number" of local organizations had been compromised.
-
Eye Security, based in the Netherlands, said it has identified active exploitation of the software in four attack waves that started July 17. Where possible, the company is notifying victims, it said.
-
Microsoft on Monday updated its guidance on how to deal with the vulnerabilities.
|
|
|
A dual citizen of the U.S. and China pleaded guilty to stealing trade secrets related to weapons-detection technology from a Los Angeles-area company. The man last year transferred more than 3,600 files from the unnamed company to his personal devices, the Justice Department said Monday. He is due to be sentenced Sept. 29 and faces up to 10 years in prison.
|
|
|
52%
|
Percentage of 436 cyber professionals who said the use of AI in the cybersecurity group will decrease the need for entry-level talent, according to a survey from professional organization ISC2.
On the other hand, 31% said AI could create new starter roles or increase demand for entry-level people.
|
|
|
|
|
|
|
|
|