Chinese hackers targeted Microsoft SharePoint servers, tech firm says
The US technology company said it had observed three groups – the Chinese state-backed Linen Typhoon and Violet Typhoon, and Storm-2603, which is believed to be China-based – using 'newly disclosed security vulnerabilities' to target internet-facing servers hosting the platform.
The announcement came amid reports in the Financial Times that Amazon was shutting down its artificial intelligence lab in Shanghai, while the consultancy McKinsey has stopped its China business from taking on work related to AI, amid worsening geopolitical tensions between Washington and Beijing.
Microsoft and IBM have recently scaled back China-based research and development projects, as US officials are stepping up their scrutiny of US companies working in AI in China.
Microsoft said in a blogpost that the vulnerabilities were in on-premises SharePoint servers, which are commonly used by companies, but not in its cloud-based service.
Many large organisations and businesses use SharePoint as a platform for storing documents and allowing colleagues to collaborate on them, and it is regarded as working well alongside other Microsoft products including Office and Outlook.
Microsoft said the attacks had begun as early as 7 July, and said the hackers were trying to exploit vulnerabilities to 'gain initial access to target organisations'.
The vulnerabilities allow attackers to spoof authentication credentials and execute malicious code remotely on servers. Microsoft said it had observed attacks where the attackers had sent a request to a SharePoint server 'enabling the theft of the key material'.
Microsoft said it had released security updates and advised all users of on-premises SharePoint systems to install them. It warned that it assessed with 'high confidence' that the hacking groups would continue to attack unpatched on-premises SharePoint systems.
Microsoft said Linen Typhoon had been 'focused on stealing intellectual property, primarily targeting organisations related to government, defence, strategic planning, and human rights' since 2012.
Sign up to Business Today
Get set for the working day – we'll point you to all the business news and analysis you need every morning
after newsletter promotion
It added that since 2015, Violet Typhoon had been 'dedicated to espionage, primarily targeting former government and military personnel, non-governmental organisations, thinktanks, higher education, digital and print media, financial and health related sectors in the United States, Europe, and east Asia'.
Microsoft said it had 'medium confidence' that the third group, Storm-2603, was based in China, but said it had not established links between the group and other Chinese threat actors. It warned that 'additional actors' may also target on-premises SharePoint systems to exploit their vulnerabilities, if its security updates were not installed.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Independent
6 minutes ago
- The Independent
Trump's freeze on $6 billion in education funds could lead to school closures, lawmakers warn
Democratic and Republican Lawmakers are asking the Trump administration to unfreeze nearly $6 billion in federal education funding, voicing concern that it could force some school districts to close. In a rare bipartisan push across local, state, and federal lines, officials have asked the administration to release billions in federal funding that support essential K-12 and adult education programs – particularly for low-income and English as a second language students. So far, 10 Republican senators and 18 Democratic governors have sent letters to Education Department Secretary Linda McMahon and Office of Management and Budget Secretary Russell Vought encouraging them to release funding. Among the Republicans is Senator Lisa Murkowski of Alaska, who told ABC News she was concerned about schools in her home state that have already struggled to stay open. "Many of our school districts have already made really hard decisions about closing schools," Murkowski said. "I wish I could say that we were really solid on the state level, but we're not. And now there's questions on the federal level as well.' On June 30, the Department of Education informed school districts across the country that it would not release $6.9 billion that would typically be done on July 1. The department said it was reviewing federal funding because it had been 'grossly misused to subsidize a radical left-wing agenda.' Nearly two weeks later, on July 18, the administration said it would release $1.3 billion in those federal frozen funds allocated toward after-school programs – but the other $5.5 billion remains in limbo. The Independent has asked the Department of Education and the Office of Management and Budget for comment. Already, school districts are looking at making cuts as they struggle to prepare for the upcoming school year. In Tallahassee, Florida, Leon County School District Superintendent Rocky Hannah said the possibility of school closures is on the table to solve the school district's financial issues – which have only been made worse by federal funding cuts. 'We're going to look at enrollment data and school zones to see if that could potentially be of financial benefit to us,' Hanna told the Tallahassee Democrat. 'Of course, we do not want to do that, but all options are on the table, including the merging of school sites.' A spokesperson for the Palm Beach County School District told WPTV that the 'ongoing delay in releasing these funds poses significant challenges and could necessitate the elimination of essential services for our students and educators.' In their letter to McMahon and Vought, Republicans said freezing funds was 'contrary' to President Donald Trump's desire to shut down the Department of Education in order to return education to the states. 'The decision to withhold this funding is contrary to President Trump's goal of returning K-12 education to the states. This funding goes directly to states and local school districts, where local leaders decide how this funding is spent, because as we know, local communities know how to best serve students and families. Withholding this funding denies states and communities the opportunity to pursue localized initiatives to support students and their families,' the 10 Republicans wrote. Multiple school districts in Murkowski's home state have sued the Trump administration for withholding funds, arguing that it violates the Impoundment Control Act, among other constitutional provisions. Murkowski told ABC News she is 'very worried.'
Reuters
6 minutes ago
- Reuters
Chevron cuts 575 jobs in Houston after closing Hess acquisition, filing reveals
July 23 (Reuters) - Chevron (CVX.N), opens new tab cut 575 positions in the Houston area after it completed its $55 billion merger with Hess, a Texas Workforce Commission filing revealed on Wednesday. According to a Worker Adjustment & Retraining Notification dated July 18, the U.S. energy major laid off the employees when its takeover of Hess was officially completed. The reductions will take effect on September 26, according to the notice. The merger was delayed for over a year but even as the green light for it was awaited, Chevron had been making preparations so it could close the deal with Hess quickly, Reuters previously reported. Information technology workers from Chevron and Hess met regularly to plan the integration, and Hess employees were informed that they could request a severance package following the deal's close. Converting technology and combining employees from both companies would take a few months, Chevron CEO Mike Wirth had told Reuters in an interview last week.
Daily Mail
6 minutes ago
- Daily Mail
Anna Paulina Luna unleashes hell on Fox News host for his 'wild take' on Jerome Powell
Republican Rep. Anna Paulina Luna skewered a Fox Business host and demanded that he retract comments criticizing her criminal referral for Federal Reserve Chairman Jerome Powell. The Florida Republican recommended criminal charges against Powell to the Department of Justice earlier this week alleging he lied to Congress. The effort made good on a promise she made the week before to hold him accountable for cost overruns in the Federal Reserve's Washington HQ remodel. The plan, originally approved by the Federal Reserve's board in 2017, has ballooned in cost from around 1.9 billion to $2.5 billion, prompting outrage from critics. But Fox Business host Stuart Varney, a mainstay on the channel, called out Luna this week for setting a new precedent in recommending charges against Powell over a 'monetary policy.' 'Anna Paulina Luna ... she's taken the fight the Fed fight to a new level,' Varney said on his show. 'She's referred power to the Justice Department. She accuses him of lying to Congress about the expensive renovations at the Fed's headquarters.' 'Lying to Congress is a criminal offense if you have a dispute of a monetary policy, and that's what this is, and you can't change your opponent's mind, should you then charge him with corruption?' Varney asked. 'It seems like we're stepping over a line, and it reminds me of the lawfare harassment of candidate Trump.' Catching wind of Varney's critique, Luna unleashed on the TV host. 'Stuart Varney should take the time to read my criminal referral for Jerome Powell before making uninformed statements on live television,' she posted on X Wednesday. 'Apparently, Varney is telepathic and knows how I think — and also thinks $700 million in mismanaged funds is no big deal? Wild take. You should retract your statement.' Luna claims that Powell perjured himself twice while testifying to Congress about the remodel. Perjury comes with a potential for five years in jail and fines. She accused the chairman of lying about the Federal Reserve's luxurious amenities in the Marriner S. Eccles and misreporting the progress of the renovations. Luna is accusing Powell of false claims while testifying under oath during a Senate committee hearing. Office of Management and Budget (OMB) Director Russell Vought has sent a letter to Powell asking about his congressional testimony on the renovation project. The letter is seen as a pretext to fire Powell for 'cause' over the matter. Vought has also accused the chairman of overseeing an 'ostentatious' remodeling effort. Powell has defended the renovations as necessary regardless of the cost overruns. 'Both buildings were in need of significant structural repairs and other updates to make the buildings safe, healthy, and effective places to work, including the removal of asbestos and lead contamination, complete replacement of antiquated systems such as electrical, plumbing, heating, ventilation, and air conditioning, as well as fire detection and suppression systems,' Powell wrote back to Vought. After a recent meeting with the president last week, Luna predicted on X that Trump would soon fire Powell, though that has not happened yet. Trump has for years lashed out at the chairman for his handling of the U.S. central bank, repeatedly slamming the Fed Chair Powell for not lowering interest rates and bestowing him with the nickname 'Too Late' Powell. The chairman has taken a wait and see approach to interest rates, arguing that it is better for consumers to keep borrowing costs stable are global markets digest Trump's tariff plan. The president has vacillated on firing Powell, a move that no president has taken before, but he may end up waiting out his term, which expires mid-2026.
