Microsoft alerts businesses and governments to attacks on SharePoint servers
The Federal Bureau of Investigation said Sunday it is aware of the attacks and is working closely with its federal and private sector partners, but offered no other details.
In an alert issued Saturday, Microsoft (MSFT) said the vulnerabilities apply only to SharePoint servers used within organizations. It said SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the attacks.
'We've been coordinating closely with CISA, DOD Cyber Defense Command and key cybersecurity partners globally throughout our response,' a Microsoft spokesperson said, adding that the company had issued security updates and urged customers to install them immediately.
The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted US and international agencies and businesses.
The hack is known as a 'zero day' attack because it targeted a previously unknown vulnerability, the newspaper said, quoting experts. Tens of thousands of servers were at risk.
In the alert, Microsoft said that a vulnerability 'allows an authorized attacker to perform spoofing over a network.' It issued recommendations to stop the attackers from exploiting it.
In a spoofing attack, an actor can manipulate financial markets or agencies by hiding the actor's identity and appearing to be a trusted person, organization or website.
Earlier, Microsoft said it is working on updates to 2016 and 2019 versions of SharePoint. If customers cannot enable recommended malware protection, they should disconnect their servers from the internet until a security update is available, it added.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Tom's Guide
4 hours ago
- Tom's Guide
Is Steam Deck 2 secretly the next-gen PlayStation handheld? Valve and Sony's rumored partnership could make it happen, and I'm all for it
Rumors of Valve's most-wanted Steam Deck 2 are heating up, with the next-gen gaming handheld tipped to be in the works. But there's another conversation that's caught my attention — and it involves a rumored partnership between Sony and Valve. Gaming handhelds are picking up steam, with Microsoft teaming up with Asus to deliver a ROG Xbox Ally and Ally X this year, the Lenovo Legion Go S with SteamOS acting as a spiritual successor to the Steam Deck and the AMD Ryzen Z2 Extreme in the MSI Claw A8 expected to pack some serious power. Oh, and not to mention the Nintendo Switch 2. Then there's Sony with its PlayStation Portal. Streaming PS5 games on what is basically a DualSense controller with a screen slapped in the middle has its merits, but it's not exactly the next-gen PlayStation handheld fans have been waiting for. But what if the rumored Steam Deck 2 could act as the next PlayStation handheld? Well, considering speculation surrounding a subtle but clear Sony and Valve partnership (as per YouTuber Moore's Law is Dead), it isn't out of the realm of possibility. In fact, considering Sony's support of its own first-party titles on Steam already, the Steam Deck 2 could be Sony's answer to a next-gen PlayStation handheld. There's now a good selection of the latest PlayStation-first games on PC, with God of War Ragnarök, Ghost of Tsushima, Ratchet & Clank: Rift Apart, Helldivers 2, Returnal, Spider-Man and the recent Stellar Blade making their way over to Steam. Much of this is thanks to Sony's own Nixxes Software, who take on porting PS games to PC (and masterfully, too). The developers were behind bringing The Last of Us Part II to PC, and it was Naughty Dog who told me that TLOU Part II is "perfect" for Steam Deck. And yes, it is Steam Deck verified, with the developers prioritizing this to make sure Deck owners could play this graphically demanding game on the go. But that's not the only title that's been verified, and you'll find nearly all PS games are fit to be played on Steam Deck — and it shows Sony's support. Of course, Sony would want its games to work well on PC, as a terribly optimized game wouldn't go down well. But it's clear PlayStation offers big support for its games on Valve's Steam Deck, and on Steam in general, since it's the only other platform that delivers PlayStation exclusives. With this in mind, having a more powerful Steam Deck 2 to play the latest PlayStation titles would be hugely beneficial, and it makes Valve's rumored gaming handheld somewhat of a de facto next-gen PlayStation handheld. Plus, with the now-leaked AMD "Magnus" Zen 6 APU tipped to power the rumored PS6, and possibly a form of this chip on the Steam Deck 2 or Valve's rumored Steam Box, there's a lot of crossover to allow PlayStation games to run more easily on Steam platforms. For now, this is all just wishful thinking, but there have been murmurs of a next PlayStation handheld coming. And apparently, it's set to launch alongside the PS6. I'm all for a Steam Deck 2 being the way to play PS titles, but if Sony has another PS Vita up its sleeve that can run games natively, then I'll welcome it with open arms. Rumor has it that it may even support AI upscaling tech, similar to the PS5 Pro's PSSR (PlayStation Spectral Super Resolution). As noted by leaker KeplerL2, the next PlayStation handheld is expected to arrive with 16GB of DDR5X RAM, a third of the base PS5's memory bandwidth (4MB of L2 cache but with 16 MB of MALL cache) and will be powered by an AMD chip. That's yet another nod to AMD's upcoming chipsets. Now, there's no official word on Sony bringing out another handheld, and we may not end up seeing one after all. But if that's the case, perhaps the Steam Deck 2 could fill its shoes instead. And with Valve making sure its next hardware release offers a big enough performance leap (via The Verge), playing PlayStation games on a Steam Deck 2 is sure to be a treat. Follow Tom's Guide on Google News to get our up-to-date news, how-tos, and reviews in your feeds. Make sure to click the Follow button.
Business Insider
4 hours ago
- Business Insider
Surge AI's CEO says he would never hire these 2 roles at an early-stage startup
Product managers and data scientists have no place on a founding team, said Surge AI's CEO, Edwin Chen. Chen said on an episode of "No Priors Podcast" published Thursday that he often hears early-stage founders list the roles among their first five to 10 hires. "This is just wild to me," he said. Chen, who used to be a data scientist himself, said he would not hire data scientists early. "Data scientists are great when you want to optimize your product by 2% or 5%, but that's definitely not what you want to be doing when you start a company," he said. "You're trying to swing for 10x or 100x changes, not worrying and nitpicking about small percentage points that are just noise anyway." The founder of the data labeling startup also said product managers don't make sense early on. He said that the role becomes useful only once engineers no longer have the time or capacity to drive product direction. "Your engineer should be hands-on. They should be having great ideas as well," he said. " Product managers are great when your company gets big enough, but at the beginning, you should be thinking about yourself, about what product you want to build," he added. Surge AI and Chen did not respond to a request for comment from Business Insider. The great product manager debate Chen's comments come as the debate continues in the startup world over the role of product managers. Product managers have been referred to — both affectionately and critically — as "mini-CEOs" of the products they oversee. They act as a bridge among engineers, sales teams, customer service, and other departments, ensuring that products align with user needs. But the role has become a polarizing one, with some tech workers arguing that product managers add little value, Business Insider's Amanda Hoover reported in November. Microsoft wants to increase the number of engineers relative to product or program managers, BI's Ashley Stewart reported in March. Other companies like Airbnb and Snap are rethinking the need for product managers. The call for executives to go " founder mode" — a concept coined by the Y Combinator cofounder Paul Graham and touted by Airbnb's CEO, Brian Chesky — has some leaders questioning whether they should delegate product decisions to product managers. In 2023, Chesky merged product management with marketing, and Snap told The Information in the same year that it laid off 20 product managers to help speed up the company's decision-making. Others believe product managers' influence will only grow in the age of AI. Microsoft's chief technology officer, Kevin Scott, said on an episode of the "Twenty Minute VC" podcast published in March that product managers play a crucial role in setting up "feedback loops" to make AI agents better.
CNBC
5 hours ago
- CNBC
CCTV Script 24/07/25
The Trump administration's newly released "AI Action Plan" marks a clear policy shift compared to the previous Biden administration. The Trump government advocates for loosening regulations, accelerating the construction of data centers, and supporting the export of AI technologies. Analysts point out that tech companies like OpenAI and Microsoft are clear beneficiaries of this plan. According to the latest guidelines, federal agencies are instructed to remove any regulatory barriers hindering AI development. Additionally, when allocating federal funding, they will consider whether state-level regulations are unfavorable to AI. The U.S. tech industry has been working to build closer ties with the Trump administration. Over the past few months, several companies have announced investments exceeding $1.5 trillion in data centers and manufacturing sectors. According to the U.S. nonprofit organization Issue One, eight American tech companies, including OpenAI, Meta, and NVIDIA, spent a total of $36 million on federal lobbying in the first half of this year. Critics have raised concerns about this lobbying influence. For instance, the executive director of the U.S. nonprofit "Tech Oversight Project" argued that the White House's AI plan seems like it simply rubber-stamped recommendations from big tech CEOs, turning them into official government documents. However, it's important to note that implementing these plans faces significant real-world challenges. Brooke, Vice President of the Atlantic Council, highlighted execution challenges. He questioned whether, given the widespread budget cuts and staff shortages in the federal government, there are sufficient expertise and financial resources to fulfill the commitments and goals outlined in the AI Action Plan. Additionally, experts have pointed out difficulties in energy planning. A former White House Chief Information Officer told CNBC that the government faces tough choices: on one hand, it must ensure stable power supply for data centers handling critical government or corporate tasks; on the other hand, these data centers are often located near residential areas and schools, which complicates planning. "...now you're thinking about, well, who gets powered today? Is it a residential neighborhood? Is it the schools, or is it this data center?... it's really a balancing act on a tightrope." Finally, legal experts have raised concerns about the "AI Action Plan," focusing on two key issues: the unresolved copyright disputes and the vague definition of "ideological bias." Currently, U.S. media and entertainment companies have filed dozens of lawsuits regarding whether tech companies can use copyrighted content to train AI models. The Trump administration has yet to make a clear statement on this issue. What Trump has explicitly stated, however, is his demand for AI models to maintain ideological neutrality. However, Professor Little from the University of California, San Francisco, pointed out that the U.S. government's definition of ideology remains unclear.
