logo
Microsoft server hack hit 100 organisations: analysts

Microsoft server hack hit 100 organisations: analysts

West Australian4 days ago
A sweeping cyber espionage operation targeting Microsoft server software has compromised about 100 different organisations, two of the groups that helped uncover the campaign say.
Microsoft on Saturday issued an alert about "active attacks" on self-hosted SharePoint servers, which are widely used by organisations to share documents and collaborate within organisations.
SharePoint instances run off of Microsoft servers were unaffected.
Dubbed a "zero-day" because it leverages a previously undisclosed digital weakness, the hacks allow spies to penetrate vulnerable servers and potentially drop a backdoor to secure continuous access to victim organisations.
Vaisha Bernard, the chief hacker at Eye Security, a Netherlands-based cybersecurity firm, which discovered the hacking campaign targeting one of its clients on Friday, said that an internet scan carried out with the Shadowserver Foundation had uncovered nearly 100 victims altogether - and that was before the technique behind the hack was widely known.
"It's unambiguous," Bernard said.
"Who knows what other adversaries have done since to place other backdoors."
He declined to identify the affected organisations, saying that the relevant national authorities had been notified.
The Shadowserver Foundation confirmed the 100 figure and said that most of those affected were in the United States and Germany and that the victims included government organisations.
Another researcher said that, so far, the spying appeared to be the work of a single hacker or set of hackers.
"It's possible that this will quickly change," said Rafe Pilling, director of Threat Intelligence at Sophos, a British cybersecurity firm.
Microsoft said it had "provided security updates and encourages customers to install them," a company spokesperson said in an emailed statement.
It was not clear who was behind the ongoing hack.
The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners but offered no other details.
The UK National Cyber Security Centre said in a statement that it was aware of "a limited number" of targets in the United Kingdom.
A researcher tracking the campaign said that the campaign appeared initially aimed at a narrow set of government-related organisations.
The pool of potential targets remains vast.
According to data from Shodan, a search engine that helps to identify internet-linked equipment, more than 8000 servers online could theoretically have already been compromised by hackers.
Those servers include major industrial firms, banks, auditors, healthcare companies and several US state-level and international government entities.
"The SharePoint incident appears to have created a broad level of compromise across a range of servers globally," Daniel Card of UK cybersecurity consultancy PwnDefend said.
"Taking an assumed breach approach is wise, and it's also important to understand that just applying the patch isn't all that is required here."
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

Parents back push to expand child care subsidy options
Parents back push to expand child care subsidy options

Perth Now

time36 minutes ago

  • Perth Now

Parents back push to expand child care subsidy options

A push to expand Australia's childcare subsidy to include more care options has the support of parents, advocates and politicians as the government remains focused on improving standards at existing centres. A bill empowering authorities to strip funding from childcare operators who fail to meet safety standards, among other measures, was this week fast-tracked during the first sitting of the 48th federal parliament. Operators who fall down on quality, safety and compliance standards could be cut out of subsidies, which typically cover a large proportion of parents' fees, and also blocked from opening new centres. Education Minister Jason Clare says he doesn't want to see funding removed and that the legislation should more compel providers to improve standards in the wake of recent abuse cases. The crackdown is part of the government's promise to guarantee universal access to early education and while welcomed by parents and advocates, there are also calls for a national early-childhood commission to ensure consistent oversight and accountability. Advocacy group For Parents has gone a step further, launching a petition calling on the government to provide equitable support for families who choose alternatives to centre-based care. In an economy where most families need both parents to work, there should be more choice when it comes to childcare, says co-founder Cecelia Cobb. "This is about giving families more freedom because the way that the subsidy currently works is that centre-based childcare is the only option many can afford," she told AAP. "There is a huge potential for additional workplace participation, as lots of people delay going back to work until they can get into their preferred centre." The childcare subsidy is predicted to exceed $16.2 billion in 2025/26 and helps families manage childcare costs but access and the amount depend on specific eligibility criteria. Yet services such as BubbaDesk and CoWork Creche, which combine co-working spaces with flexible childcare, are not supported by the subsidy. While the price per day is based on the average of local daycare centres, the lack of subsidy means many parents cannot afford to use the service. "The demand is huge as traditional daycare doesn't always fit with people's needs," BubbaDesk founder Lauren Perrett said. "When you become a parent, you wonder why close-proximity care hasn't been built into traditional office spaces - it's a no-brainer. "Parents are delaying their return to work and considering not returning at all because they don't feel their kids are safe in out-of-home care and the instinct is to keep our babies close." Illawarra-based mum Jenna Bush placed her baby girl Grace on multiple childcare waitlists when she was born but received few placement offers. The one place she was offered and toured gave her the "ick" and she could not bring herself to enrol Grace there. Instead, she started using BubbaDesk as she was able to work remotely from the co-working space. "Being in close proximity and having that contact to her throughout the day gives me that peace of mind," she said. "But financially, even though I can claim some of the co-working part through tax, reducing that fortnightly payment would be really helpful if the subsidy was expanded." Liberal senator Maria Kovacic is among those backing the For Parents petition. She says it's not about "tearing down" formal childcare centres. "Expanding the subsidy in the way these families are calling for would not only deliver flexibility," she told parliament on Wednesday. "It would (also) begin to recognise in a tangible way the value of informal care and the unpaid labour that holds up our economy and our communities."

Australia, UK to ink 50-year deal to underpin AUKUS
Australia, UK to ink 50-year deal to underpin AUKUS

Perth Now

time2 hours ago

  • Perth Now

Australia, UK to ink 50-year deal to underpin AUKUS

Australia and the UK will ink a 50-year deal to underpin delivery of the AUKUS nuclear submarine agreement, amid concerns about a US review of the trilateral pact. AUKUS, formed in 2021 between Australia, the UK and US to address shared concerns about China's rising military ambition, is designed to enable Australia to acquire nuclear-powered attack submarines in the 2040s. But doubts have been raised about the future of the $368 billion program after the Trump administration this year initiated a review of the deal to examine if it met its "American First" criteria. Defence Minister Richard Marles said he remained confident about the future of US involvement on the eve of Australia and the UK signing a multi-decade bilateral deal cementing their commitment. "It is a profoundly important treaty that we will sign," Mr Marles said on Friday alongside Foreign Minister Penny Wong and their British counterparts John Healey and David Lammy. "It forms part of a trilateral agreement that we have and we are really confident about the progress of all three countries in bringing that to fruition." The treaty, to be signed in Geelong on Saturday, would allow "comprehensive co-operation" on the design, build, operation, sustainment, and disposal of AUKUS submarines, the ministers said in a joint statement. It will also support development of personnel, workforce, infrastructure and regulatory systems for Australia's nuclear-powered submarine program, the statement said. Mr Lammy said the treaty showed the strength of Australia and the UK's commitment to AUKUS. "It's clear that the UK-Australia relationship is an anchor in what is a very volatile world, providing stability in troubled waters and a relationship that holds steady whichever way the geopolitical winds are blowing," he said. Mr Healey said the UK was confident it could meet its obligations under the deal on industrial capacity to deliver SSN-AUKUS submarines. "We have the technology and the designs to be able to deliver our commitments to the SSN-AUKUS and we will," he said. Australia will pay $5 billion to support British industry to design and produce nuclear reactors to power the future AUKUS-class submarines. Australia will acquire at least three Virginia-class nuclear-powered submarines from the US in the early 2030s. On Sunday, the ministers will visit Darwin to observe joint military exercises known as Talisman Sabre, which comprise more than 30,000 personnel from 19 militaries. This year, the war games involve the UK's Carrier Strike Group, led by the Royal Navy flagship HMS Prince of Wales - the first UK carrier strike group to visit Australia since 1997.

'Anchor in a volatile world': Australia, UK draw closer
'Anchor in a volatile world': Australia, UK draw closer

The Advertiser

time4 hours ago

  • The Advertiser

'Anchor in a volatile world': Australia, UK draw closer

The UK has declared its ties to Australia are "absolute", vowing it will deliver on its defence commitments as doubt grows over the reliability of the US. A 50-year treaty to underpin the AUKUS security pact will be signed in Geelong on Saturday following talks hosted by Foreign Minister Penny Wong and Defence Minister Richard Marles for their UK counterparts in Sydney. The AUKUS security partnership involves the US, UK and Australia, but the fresh treaty is only between London and Canberra. The treaty shows the UK and Australia are strengthening ties in the face of the Pentagon's yet-to-be-completed AUKUS review. UK Foreign Secretary David Lammy described talks with the Albanese government as "focused and constructive". "It's clear that the UK, Australia relationship is an anchor in what is a very volatile world, providing stability in troubled waters and a relationship that holds steady whichever way the geopolitical winds are blowing," he said. Defence Secretary John Healey said the UK's commitment to Australia was "absolute". Mr Healey said his government had taken steps to ensure capacity for the planned SSN-AUKUS class submarines. "We have made a commitment ... in making sure that we have the productive capacity, we have the technology and the designs to be able to deliver our commitments to the SSN-AUKUS and we will," he said. The new boats will be built in Adelaide and delivered in the 2040s. Defence Minister Richard Marles said the inking of the deal would underpin the development of AUKUS. The bilateral treaty will facilitate greater economic co-operation between the two nations by improving both countries' industrial capacity. As part of the existing defence agreement, Australia will pay $5 billion to support British industry to design and produce nuclear reactors to power the future AUKUS-class submarines. Australia is set to be sold least three Virginia-class nuclear-powered submarines from the US in the early 2030s under the $368 billion AUKUS submarine program. But the planned sale of US-built boats has been up in the air since the Trump administration launched a review of the deal to examine whether it aligns with his "America first" agenda. Defence analysts believe a likely outcome of the US review will be a request for more money from Australia to support its submarine industrial base. The UK's Carrier Strike Group, led by the Royal Navy flagship HMS Prince of Wales, arrived in Darwin on Wednesday as Australia hosts Exercise Talisman Sabre. It's the first UK carrier strike group to visit Australia since 1997. The international task group includes five core ships, 24 jets and 17 helicopters, centred on the flagship aircraft carrier. Mr Lammy said the deployment of British troops to the region was a signal of its determination to keep the Indo-Pacific free and open. Mr Marles and Senator Wong will join their UK counterparts in Darwin on Sunday to observe the strike group in action. The UK has declared its ties to Australia are "absolute", vowing it will deliver on its defence commitments as doubt grows over the reliability of the US. A 50-year treaty to underpin the AUKUS security pact will be signed in Geelong on Saturday following talks hosted by Foreign Minister Penny Wong and Defence Minister Richard Marles for their UK counterparts in Sydney. The AUKUS security partnership involves the US, UK and Australia, but the fresh treaty is only between London and Canberra. The treaty shows the UK and Australia are strengthening ties in the face of the Pentagon's yet-to-be-completed AUKUS review. UK Foreign Secretary David Lammy described talks with the Albanese government as "focused and constructive". "It's clear that the UK, Australia relationship is an anchor in what is a very volatile world, providing stability in troubled waters and a relationship that holds steady whichever way the geopolitical winds are blowing," he said. Defence Secretary John Healey said the UK's commitment to Australia was "absolute". Mr Healey said his government had taken steps to ensure capacity for the planned SSN-AUKUS class submarines. "We have made a commitment ... in making sure that we have the productive capacity, we have the technology and the designs to be able to deliver our commitments to the SSN-AUKUS and we will," he said. The new boats will be built in Adelaide and delivered in the 2040s. Defence Minister Richard Marles said the inking of the deal would underpin the development of AUKUS. The bilateral treaty will facilitate greater economic co-operation between the two nations by improving both countries' industrial capacity. As part of the existing defence agreement, Australia will pay $5 billion to support British industry to design and produce nuclear reactors to power the future AUKUS-class submarines. Australia is set to be sold least three Virginia-class nuclear-powered submarines from the US in the early 2030s under the $368 billion AUKUS submarine program. But the planned sale of US-built boats has been up in the air since the Trump administration launched a review of the deal to examine whether it aligns with his "America first" agenda. Defence analysts believe a likely outcome of the US review will be a request for more money from Australia to support its submarine industrial base. The UK's Carrier Strike Group, led by the Royal Navy flagship HMS Prince of Wales, arrived in Darwin on Wednesday as Australia hosts Exercise Talisman Sabre. It's the first UK carrier strike group to visit Australia since 1997. The international task group includes five core ships, 24 jets and 17 helicopters, centred on the flagship aircraft carrier. Mr Lammy said the deployment of British troops to the region was a signal of its determination to keep the Indo-Pacific free and open. Mr Marles and Senator Wong will join their UK counterparts in Darwin on Sunday to observe the strike group in action. The UK has declared its ties to Australia are "absolute", vowing it will deliver on its defence commitments as doubt grows over the reliability of the US. A 50-year treaty to underpin the AUKUS security pact will be signed in Geelong on Saturday following talks hosted by Foreign Minister Penny Wong and Defence Minister Richard Marles for their UK counterparts in Sydney. The AUKUS security partnership involves the US, UK and Australia, but the fresh treaty is only between London and Canberra. The treaty shows the UK and Australia are strengthening ties in the face of the Pentagon's yet-to-be-completed AUKUS review. UK Foreign Secretary David Lammy described talks with the Albanese government as "focused and constructive". "It's clear that the UK, Australia relationship is an anchor in what is a very volatile world, providing stability in troubled waters and a relationship that holds steady whichever way the geopolitical winds are blowing," he said. Defence Secretary John Healey said the UK's commitment to Australia was "absolute". Mr Healey said his government had taken steps to ensure capacity for the planned SSN-AUKUS class submarines. "We have made a commitment ... in making sure that we have the productive capacity, we have the technology and the designs to be able to deliver our commitments to the SSN-AUKUS and we will," he said. The new boats will be built in Adelaide and delivered in the 2040s. Defence Minister Richard Marles said the inking of the deal would underpin the development of AUKUS. The bilateral treaty will facilitate greater economic co-operation between the two nations by improving both countries' industrial capacity. As part of the existing defence agreement, Australia will pay $5 billion to support British industry to design and produce nuclear reactors to power the future AUKUS-class submarines. Australia is set to be sold least three Virginia-class nuclear-powered submarines from the US in the early 2030s under the $368 billion AUKUS submarine program. But the planned sale of US-built boats has been up in the air since the Trump administration launched a review of the deal to examine whether it aligns with his "America first" agenda. Defence analysts believe a likely outcome of the US review will be a request for more money from Australia to support its submarine industrial base. The UK's Carrier Strike Group, led by the Royal Navy flagship HMS Prince of Wales, arrived in Darwin on Wednesday as Australia hosts Exercise Talisman Sabre. It's the first UK carrier strike group to visit Australia since 1997. The international task group includes five core ships, 24 jets and 17 helicopters, centred on the flagship aircraft carrier. Mr Lammy said the deployment of British troops to the region was a signal of its determination to keep the Indo-Pacific free and open. Mr Marles and Senator Wong will join their UK counterparts in Darwin on Sunday to observe the strike group in action. The UK has declared its ties to Australia are "absolute", vowing it will deliver on its defence commitments as doubt grows over the reliability of the US. A 50-year treaty to underpin the AUKUS security pact will be signed in Geelong on Saturday following talks hosted by Foreign Minister Penny Wong and Defence Minister Richard Marles for their UK counterparts in Sydney. The AUKUS security partnership involves the US, UK and Australia, but the fresh treaty is only between London and Canberra. The treaty shows the UK and Australia are strengthening ties in the face of the Pentagon's yet-to-be-completed AUKUS review. UK Foreign Secretary David Lammy described talks with the Albanese government as "focused and constructive". "It's clear that the UK, Australia relationship is an anchor in what is a very volatile world, providing stability in troubled waters and a relationship that holds steady whichever way the geopolitical winds are blowing," he said. Defence Secretary John Healey said the UK's commitment to Australia was "absolute". Mr Healey said his government had taken steps to ensure capacity for the planned SSN-AUKUS class submarines. "We have made a commitment ... in making sure that we have the productive capacity, we have the technology and the designs to be able to deliver our commitments to the SSN-AUKUS and we will," he said. The new boats will be built in Adelaide and delivered in the 2040s. Defence Minister Richard Marles said the inking of the deal would underpin the development of AUKUS. The bilateral treaty will facilitate greater economic co-operation between the two nations by improving both countries' industrial capacity. As part of the existing defence agreement, Australia will pay $5 billion to support British industry to design and produce nuclear reactors to power the future AUKUS-class submarines. Australia is set to be sold least three Virginia-class nuclear-powered submarines from the US in the early 2030s under the $368 billion AUKUS submarine program. But the planned sale of US-built boats has been up in the air since the Trump administration launched a review of the deal to examine whether it aligns with his "America first" agenda. Defence analysts believe a likely outcome of the US review will be a request for more money from Australia to support its submarine industrial base. The UK's Carrier Strike Group, led by the Royal Navy flagship HMS Prince of Wales, arrived in Darwin on Wednesday as Australia hosts Exercise Talisman Sabre. It's the first UK carrier strike group to visit Australia since 1997. The international task group includes five core ships, 24 jets and 17 helicopters, centred on the flagship aircraft carrier. Mr Lammy said the deployment of British troops to the region was a signal of its determination to keep the Indo-Pacific free and open. Mr Marles and Senator Wong will join their UK counterparts in Darwin on Sunday to observe the strike group in action.

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store