Microsoft server hack hit 100 organisations: analysts
Microsoft on Saturday issued an alert about "active attacks" on self-hosted SharePoint servers, which are widely used by organisations to share documents and collaborate within organisations.
SharePoint instances run off of Microsoft servers were unaffected.
Dubbed a "zero-day" because it leverages a previously undisclosed digital weakness, the hacks allow spies to penetrate vulnerable servers and potentially drop a backdoor to secure continuous access to victim organisations.
❗ ALERT ❗ ASD's ACSC is aware of a vulnerability affecting instances of Microsoft Office SharePoint Server products. Organisations should take immediate action 👉 https://t.co/HB1ATIHewP pic.twitter.com/qqefoLyMb7— Australian Signals Directorate (@ASDGovAu) July 20, 2025
Vaisha Bernard, the chief hacker at Eye Security, a Netherlands-based cybersecurity firm, which discovered the hacking campaign targeting one of its clients on Friday, said that an internet scan carried out with the Shadowserver Foundation had uncovered nearly 100 victims altogether - and that was before the technique behind the hack was widely known.
"It's unambiguous," Bernard said.
"Who knows what other adversaries have done since to place other backdoors."
He declined to identify the affected organisations, saying that the relevant national authorities had been notified.
The Shadowserver Foundation confirmed the 100 figure and said that most of those affected were in the United States and Germany and that the victims included government organisations.
Another researcher said that, so far, the spying appeared to be the work of a single hacker or set of hackers.
"It's possible that this will quickly change," said Rafe Pilling, director of Threat Intelligence at Sophos, a British cybersecurity firm.
Microsoft said it had "provided security updates and encourages customers to install them," a company spokesperson said in an emailed statement.
It was not clear who was behind the ongoing hack.
The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners but offered no other details.
The UK National Cyber Security Centre said in a statement that it was aware of "a limited number" of targets in the United Kingdom.
A researcher tracking the campaign said that the campaign appeared initially aimed at a narrow set of government-related organisations.
The pool of potential targets remains vast.
According to data from Shodan, a search engine that helps to identify internet-linked equipment, more than 8000 servers online could theoretically have already been compromised by hackers.
Those servers include major industrial firms, banks, auditors, healthcare companies and several US state-level and international government entities.
"The SharePoint incident appears to have created a broad level of compromise across a range of servers globally," Daniel Card of UK cybersecurity consultancy PwnDefend said.
"Taking an assumed breach approach is wise, and it's also important to understand that just applying the patch isn't all that is required here."
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Advertiser
44 minutes ago
- The Advertiser
Attempted murder charges against wife of celebrated chef after house fire
A woman accused of trying to murder two children in a house fire has been identified as the wife of an Australian-based, internationally acclaimed chef. Hyun Ju Ahn, 37, was arrested on July 17 and charged with two counts of attempted murder after a fire at the family's Chadstone home in Melbourne's southeast on the night of May 21. She is married to Jae Bang, the head chef and owner of the celebrated Freyja restaurant on Collins Street in Melbourne's CBD. The couple and their two children, aged eight and ten, have lived in Melbourne for three years. Emergency services were called to a two-storey home on Terrigal Street in Chadstone at 9.40pm on May 21. A woman and two girls were rescued from the fire and taken to the hospital in a critical condition, police said. Detectives from the Arson and Explosives Squad investigated the fire and charged the 37-year-old woman with attempted murder after a two-month probe. Her case remains before Melbourne Magistrates' Court. A fundraiser, started almost a week before the charges were laid, had raised more than $20,000 to support the family. The GoFundMe page, organised by fellow chefs, said that Mr Bang was away from Melbourne on May 21. It said that the family was "unconscious when the firefighters rescued them". "The family is recovering, but they have no home, no other family in the area, and have many expenses to cover from the fire rescue and hospital stays," it said. The family has moved around the world as opportunities to work abroad arose. Mr Bang worked his way through some of the most respected kitchens in the US, Europe and Asia before moving to Australia in 2022 to open the Nordic-inspired restaurant. He told this masthead in April that, with such a busy schedule at the restaurant, the family relished their time together on the weekend. He said they loved sharing a meal at their favourite Chinese restaurant, Tung Wo, when they had time. A woman accused of trying to murder two children in a house fire has been identified as the wife of an Australian-based, internationally acclaimed chef. Hyun Ju Ahn, 37, was arrested on July 17 and charged with two counts of attempted murder after a fire at the family's Chadstone home in Melbourne's southeast on the night of May 21. She is married to Jae Bang, the head chef and owner of the celebrated Freyja restaurant on Collins Street in Melbourne's CBD. The couple and their two children, aged eight and ten, have lived in Melbourne for three years. Emergency services were called to a two-storey home on Terrigal Street in Chadstone at 9.40pm on May 21. A woman and two girls were rescued from the fire and taken to the hospital in a critical condition, police said. Detectives from the Arson and Explosives Squad investigated the fire and charged the 37-year-old woman with attempted murder after a two-month probe. Her case remains before Melbourne Magistrates' Court. A fundraiser, started almost a week before the charges were laid, had raised more than $20,000 to support the family. The GoFundMe page, organised by fellow chefs, said that Mr Bang was away from Melbourne on May 21. It said that the family was "unconscious when the firefighters rescued them". "The family is recovering, but they have no home, no other family in the area, and have many expenses to cover from the fire rescue and hospital stays," it said. The family has moved around the world as opportunities to work abroad arose. Mr Bang worked his way through some of the most respected kitchens in the US, Europe and Asia before moving to Australia in 2022 to open the Nordic-inspired restaurant. He told this masthead in April that, with such a busy schedule at the restaurant, the family relished their time together on the weekend. He said they loved sharing a meal at their favourite Chinese restaurant, Tung Wo, when they had time. A woman accused of trying to murder two children in a house fire has been identified as the wife of an Australian-based, internationally acclaimed chef. Hyun Ju Ahn, 37, was arrested on July 17 and charged with two counts of attempted murder after a fire at the family's Chadstone home in Melbourne's southeast on the night of May 21. She is married to Jae Bang, the head chef and owner of the celebrated Freyja restaurant on Collins Street in Melbourne's CBD. The couple and their two children, aged eight and ten, have lived in Melbourne for three years. Emergency services were called to a two-storey home on Terrigal Street in Chadstone at 9.40pm on May 21. A woman and two girls were rescued from the fire and taken to the hospital in a critical condition, police said. Detectives from the Arson and Explosives Squad investigated the fire and charged the 37-year-old woman with attempted murder after a two-month probe. Her case remains before Melbourne Magistrates' Court. A fundraiser, started almost a week before the charges were laid, had raised more than $20,000 to support the family. The GoFundMe page, organised by fellow chefs, said that Mr Bang was away from Melbourne on May 21. It said that the family was "unconscious when the firefighters rescued them". "The family is recovering, but they have no home, no other family in the area, and have many expenses to cover from the fire rescue and hospital stays," it said. The family has moved around the world as opportunities to work abroad arose. Mr Bang worked his way through some of the most respected kitchens in the US, Europe and Asia before moving to Australia in 2022 to open the Nordic-inspired restaurant. He told this masthead in April that, with such a busy schedule at the restaurant, the family relished their time together on the weekend. He said they loved sharing a meal at their favourite Chinese restaurant, Tung Wo, when they had time. A woman accused of trying to murder two children in a house fire has been identified as the wife of an Australian-based, internationally acclaimed chef. Hyun Ju Ahn, 37, was arrested on July 17 and charged with two counts of attempted murder after a fire at the family's Chadstone home in Melbourne's southeast on the night of May 21. She is married to Jae Bang, the head chef and owner of the celebrated Freyja restaurant on Collins Street in Melbourne's CBD. The couple and their two children, aged eight and ten, have lived in Melbourne for three years. Emergency services were called to a two-storey home on Terrigal Street in Chadstone at 9.40pm on May 21. A woman and two girls were rescued from the fire and taken to the hospital in a critical condition, police said. Detectives from the Arson and Explosives Squad investigated the fire and charged the 37-year-old woman with attempted murder after a two-month probe. Her case remains before Melbourne Magistrates' Court. A fundraiser, started almost a week before the charges were laid, had raised more than $20,000 to support the family. The GoFundMe page, organised by fellow chefs, said that Mr Bang was away from Melbourne on May 21. It said that the family was "unconscious when the firefighters rescued them". "The family is recovering, but they have no home, no other family in the area, and have many expenses to cover from the fire rescue and hospital stays," it said. The family has moved around the world as opportunities to work abroad arose. Mr Bang worked his way through some of the most respected kitchens in the US, Europe and Asia before moving to Australia in 2022 to open the Nordic-inspired restaurant. He told this masthead in April that, with such a busy schedule at the restaurant, the family relished their time together on the weekend. He said they loved sharing a meal at their favourite Chinese restaurant, Tung Wo, when they had time.
Sky News AU
an hour ago
- Sky News AU
'Albo can go F himself': Jim Jefferies unloads on PM Anthony Albanese in on-air spray over CDPP's 'disgusting' refusal to prosecute Defence after fatal 2023 helicopter crash that killed his nephew
Australian comedian Jim Jefferies has launched a blistering attack on Prime Minister Anthony Albanese and the Commonwealth Director of Public Prosecutions (CDPP) over a decision not to pursue charges in the wake of a 2023 military helicopter crash that killed four soldiers. Appearing on KIIS FM's Kyle and Jackie O Show on Friday, the LA-based comedian expressed deep frustration with what he labelled a "disgusting" and "unjust" outcome, after learning the Defence Force would not be prosecuted over the incident that killed his 24-year-old nephew, Lieutenant Max Nugent. The crash, which occurred on July 28, 2023, near Hamilton Island during Exercise Talisman Sabre, claimed the lives of Lieutenant Nugent, Captain Danniel Lyon, Warrant Officer Class 2 Joseph 'Phillip' Laycock, and Corporal Alexander Naggs. Their MRH-90 Taipan helicopter, call sign Bushman 83, crashed into the water while flying in formation with three other helicopters in poor weather and low light. "I wish I were talking to you both under better circumstances," Jefferies said to the radio hosts, before launching into a passionate criticism of the two-year investigation process and the last-minute decision to drop the case. "My family has been going to watch the hearing for over two years. "For two years, they've been going, using up all their holiday leave and everything, having to listen to black box recordings, having to listen to different evidence from each side… And now, five days before the two-year date, they have said that there's no claim, the families are getting nothing, there is no fault." Under current legislation, families have a two-year window to file legal action, and the CDPP's decision, made just days before that deadline, effectively shuts the door. Jefferies argued the crash was preventable, pointing to evidence provided by test pilot Major Ian Wilson during the hearing, who warned that the TopOwl helmet used by the pilots posed a "substantial risk of multiple deaths" and said the system could amount to "industrial manslaughter". "Maybe you could argue maybe it wasn't the helmet, maybe it was, but the families deserve a day in court," the 48-year-old comedian said. "You can't just run out the clock." Jefferies said his family had been told they would receive justice. "Well, Albanese can go F himself because this isn't justice. This isn't even an attempt of letting us see if we could get justice," he said. "We haven't even been given a fair shake of the whole thing." The father-of-two also slammed the CDPP as "disgusting", citing fatigue concerns with the pilots and managerial failures within Defence. "The pilots they've proven had fatigue and shouldn't have been up there within the guidelines of the military… Even if it wasn't technical, there was some managerial problems there or what have you." Jefferies went on to criticise the federal government's public support of the armed forces, calling it hollow. "You can have people laying wreaths on Anzac Day and saying they shall not be forgotten, and we support the troops. But at the end of the day, you're doing nothing. That's all just lip service. That's all just symbolism." According to a 228-page report by the Defence Flight Safety Bureau, released in May, the crash was caused by "spatial disorientation", with Captain Lyon and co-pilot Lieutenant Nugent becoming disoriented for 21 seconds before slamming into the water at 259km/h. Following the crash, Comcare launched an investigation into potential breaches of workplace health and safety under the Commonwealth Work Health and Safety Act 2011. A brief of evidence was passed to the CDPP, but the watchdog has since confirmed it "did not consider there was sufficient evidence to commence a prosecution". After his radio interview, Jefferies shared a Nine News segment featuring interviews with the victims' families, including his brother Dan Nugent, father of Lieutenant Max Nugent and a senior NSW police officer. "Completely heartbreaking. I'm disgusted with the decision from the Commonwealth DDP. This is so wrong. I believe this is a complete cover up," Jefferies wrote on social media. "My nephew and the three other men deserve better. I hope my family takes the defence force to civil court now." Dan Nugent told Nine he was "dismayed" by the outcome, citing strong evidence presented during the inquiry about fatigue management failures and safety concerns around the TopOwl helmet. "They were fatigued to a level that would have affected their ability to fly that helicopter," he said. "How can we have confidence in any government entity, let alone our Defence Force… if they're not prepared… to contest that… for the public to be able to hear it in open court? It's just disgraceful." A relative of another fallen soldier told the ABC on Thursday they felt "defeated and broken" by the decision. "They deserved better." has reached out to the CDPP for comment.
Sydney Morning Herald
an hour ago
- Sydney Morning Herald
NeuroScientific appoints top doctor ahead of stem cell therapy rollout
Perth-based biotech NeuroScientific Biopharmaceuticals' clinical arsenal has just got a heavy-hitting upgrade with the appointment of well-credentialled Perth-based paediatric haematologist and oncologist Dr Catherine Cole as its chief medical officer. The hire has come at a critical time as the company accelerates the development of its recently acquired StemSmart technology. StemSmart uses a specific type of stem cell, mesenchymal stromal stem cells (MSC), as a last-line infusion treatment for critically ill patients, including those experiencing severe immune complications from bone marrow transplants, kidney and lung transplant rejection and the inflammatory Crohn's disease. The company expects later this year to receive the interim results from its latest compassionate trial involving patients with difficult-to-treat fistulising Crohn's disease, in which an open wound develops from a gut flare-up that extends out to the skin. A successful trial will help the company validate its proprietary StemSmart technology in this patient group, who otherwise have limited treatment options. 'Cathy's vast experience and leadership will greatly strengthen our management team.' Neuroscientific Biopharmaceuticals chairman Rob McKenzie Cole brings extensive experience to the table, having held clinical and academic leadership roles across Australia and overseas, including head of haematology and oncology at Perth Children's Hospital and professor of paediatric haematology and oncology at The University of Western Australia. She is also director of stem cell transplantation at Perth Children's Hospital, placing her front and centre in NeuroScientific's race to employ stem cell therapy to treat some of the most debilitating transplant complications and autoimmune diseases. The seasoned physician has additionally served on ethics committees and worked closely with national and international regulators, a skillset the company hopes will prove instrumental as it seeks regulatory approvals for StemSmart in Australia and abroad. NeuroScientific Biopharmaceuticals chairman Rob McKenzie said: ' We are very fortunate that Cathy is joining at this key time in the company's evolution. Her vast experience and leadership will greatly strengthen our management team as we progress our SAS fistulas in Crohn's program and make plans for future growth.'
