What to know about a vulnerability being exploited on Microsoft SharePoint servers
Empower your mind, elevate your skills
Microsoft has issued an emergency fix to close off a vulnerability in Microsoft's SharePoint software that hackers have exploited to carry out widespread attacks on businesses and at least some federal agencies.The company issued an alert to customers Saturday saying it was aware of the zero-day exploit being used to conduct attacks and that it was working to patch the issue. Microsoft updated its guidance Sunday with instructions to fix the problem for SharePoint Server 2019 and SharePoint Server Subscription Edition. Engineers were still working on a fix for the older SharePoint Server 2016 software.What is a zero-day exploit? A zero-day exploit is a cyberattack that takes advantage of a previously unknown security vulnerability. "Zero-day" refers to the fact that the security engineers have had zero days to develop a fix for the vulnerability.According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the exploit affecting SharePoint is "a variant of the existing vulnerability CVE-2025-49706 and poses a risk to organizations with on-premise SharePoint servers."Security researchers warn that the exploit, reportedly known as "ToolShell," is a serious one and can allow actors to fully access SharePoint file systems, including services connected to SharePoint, such as Teams and OneDrive.Google's Threat Intelligence Group warned that the vulnerability may allow bad actors to "bypass future patching."How widespread is the impact? Eye Security said in its blog post that it scanned over 8,000 SharePoint servers worldwide and discovered that at least dozens of systems were compromised. The cybersecurity company said the attacks likely began on July 18.Although the scope of the attack is still being assessed, CISA warned that the impact could be widespread and recommended that any servers impacted by the exploit should be disconnected from the internet until they are patched.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Time of India
an hour ago
- Time of India
Broadcom launches Jericho chip to advance AI data center networks
Academy Empower your mind, elevate your skills Broadcom's silicon division launched its next-generation Jericho networking chip on Monday, which is designed to connect data centers over 60 miles (96.5 km) apart and speed artificial intelligence computation The company's Jericho4 introduces and improves several features that increase the amount of networking traffic speeding across large networks that operate inside and between data and deploying artificial intelligence has become more computationally intensive and requires stringing together thousands of graphics processors (GPUs). Cloud computing companies such as Microsoft and Amazon require faster, more sophisticated networking chips to ensure data moves when transferring data beyond the physical walls of a data center is crucial for cloud companies because of the potential attacks that could intercept it ahead of reaching its engineers designed the Jericho chips to be deployed at a massive scale, and a single system can encompass roughly 4,500 chips, according to Ram Velaga, senior vice president and general manager of Broadcom's Core Switching help mitigate issues around network congestion, the Jericho4 chips use the same high-bandwidth memory (HBM) designers such as Nvidia and AMD use for their AI processors. It's necessary because of the volume of data that needs to be stuffed into memory at any given moment of operation."The switch is actually holding that traffic (in memory) till the congestion frees up," Velaga said. "It means you need to have a lot of memory on the chip."The longer the distance the data must travel from the chip to its destination, the more memory designers must include in the chip as addition to performance improvements, the Jericho4 also beefs up security by encrypting opted to use TSMC's three nanometer process for the Jericho4.
Economic Times
an hour ago
- Economic Times
Broadcom launches Jericho chip to advance AI data center networks
Broadcom's silicon division launched its next-generation Jericho networking chip on Monday, which is designed to connect data centers over 60 miles (96.5 km) apart and speed artificial intelligence computation The company's Jericho4 introduces and improves several features that increase the amount of networking traffic speeding across large networks that operate inside and between data and deploying artificial intelligence has become more computationally intensive and requires stringing together thousands of graphics processors (GPUs). Cloud computing companies such as Microsoft and Amazon require faster, more sophisticated networking chips to ensure data moves when transferring data beyond the physical walls of a data center is crucial for cloud companies because of the potential attacks that could intercept it ahead of reaching its engineers designed the Jericho chips to be deployed at a massive scale, and a single system can encompass roughly 4,500 chips, according to Ram Velaga, senior vice president and general manager of Broadcom's Core Switching help mitigate issues around network congestion, the Jericho4 chips use the same high-bandwidth memory (HBM) designers such as Nvidia and AMD use for their AI processors. It's necessary because of the volume of data that needs to be stuffed into memory at any given moment of operation."The switch is actually holding that traffic (in memory) till the congestion frees up," Velaga said. "It means you need to have a lot of memory on the chip."The longer the distance the data must travel from the chip to its destination, the more memory designers must include in the chip as addition to performance improvements, the Jericho4 also beefs up security by encrypting opted to use TSMC's three nanometer process for the Jericho4.
Economic Times
3 hours ago
- Economic Times
AI helps Big Tech score big numbers
Each company in the big technology pack—including Alphabet, Meta, Microsoft, and Amazon—surpassed market expectations with stellar performance in the April-June quarter. Himanshi Lohchab brings out what stood out. Tired of too many ads? Remove Ads The April-June quarter of 2025 proved stellar for the big technology pack: Alphabet, Meta, Microsoft, and Amazon, with each company surpassing market expectations. Alphabet's revenue showed that AI-led search is boosting earnings instead of outperformed estimates due to AI-powered ad optimisation and Zuckerberg's aggressive vision for personal Azure cloud surpassed $75 billion in annual run rate for the first time, zooming the stock to $4 trillion valuation – a feat achieved hitherto by AI hardware titan capital spending across these firms ranges between $331 billion and $377 billion, and consumes up to 40% of sales and 80% of operating cash flow at some companies.
