Microsoft server hack likely single actor, thousands of firms now vulnerable, researchers say
Microsoft
server software used by thousands of government agencies and businesses to share documents within organisations is likely the work of a single actor, a
cybersecurity researcher
said on Monday. Microsoft on Saturday issued an alert about "active attacks" on
SharePoint
servers used within organisations. It said that SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the exploit, also known as a "zero day" because it was previously unknown to cybersecurity researchers.
"Based on the consistency of the tradecraft seen across observed attacks, the campaign launched on Friday appears to be a single actor. However, it's possible that this will quickly change," Rafe Pilling, Director of Threat Intelligence at Sophos, a British cybersecurity firm.
That tradecraft included the sending of the same digital payload to multiple targets, Pilling added.
Microsoft said it had "provided security updates and encourages customers to install them," a company spokesperson said in an emailed statement.
It was not clear who was behind the ongoing hack. The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners, but offered no other details. Britain's National Cyber Security Centre did not immediately respond to a request for comment.
The Washington Post said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted U.S. and international agencies and businesses.
According to data from Shodan, a search engine that helps to identify internet-linked equipment, over 8,000 servers online could theoretically have already been compromised by hackers.
Those servers include major industrial firms, banks, auditors, healthcare companies, and several U.S. state-level and international government entities.
"The SharePoint incident appears to have created a broad level of compromise across a range of servers globally," said Daniel Card of British cybersecurity consultancy, PwnDefend.
"Taking an assumed breach approach is wise, and it's also important to understand that just applying the patch isn't all that is required here."
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Hindu
2 hours ago
- The Hindu
U.S., E.U. reach an 'across the board' agreement on tariffs
The United States and the European Union reached a tariff deal Sunday (July 27, 2025) after a brief meeting between President Donald Trump and European Commission chief Ursula von der Leyen. A White House deadline was days away for imposing punishing import taxes on the 27-member E.U., which is America's leading global trading partner. 'It was a very interesting negotiation. I think it's going to be great for both parties,' Mr. Trump said. The make-or-break talks were meant to head off trade penalties — and promised retaliation from Europe — that could have sent shock waves through economies around the globe. Mr. Trump and Ms. Von der Leyen held private talks at one of Mr. Trump's golf courses in Scotland, then emerged a short time later saying they had reached an 'across the board' agreement. In remarks before the session, Mr. Trump pledged to change what he characterised as 'a very one-sided transaction, very unfair to the United States.' 'I think the main sticking point is fairness,' he said while also noting, 'We've had a hard time with trade with Europe, a very hard time.' Ms. Von der Leyen had said the U.S. and E.U. combined have the world's largest trade volume, encompassing hundreds of millions of people and trillions of dollars. Trump said the stakes involved meant of making a deal, 'We should give it a shot.' Ms. Von der Leyen said Mr. Trump was 'known as a tough negotiator and dealmaker' which caused the president to interject with 'but fair." She said that, if they are successful, 'I think it would be the biggest deal each of us has ever struck.' For months, Mr. Trump has threatened most of the world with large tariffs in hopes of shrinking major U.S. trade deficits with many key trading partners. More recently, he had hinted that any deal with the EU would have to 'buy down' the currently scheduled tariff rate of 30%. The Republican president pointed to a recent U.S. agreement with Japan that set tariff rates for many goods at 15% and suggested the E.U. could agree to something similar. Asked if he would be willing to accept tariff rates lower than that, Mr. Trump said 'no.' As for the threat of retaliation from the Europeans, he said: 'They'll do what they have to do.' Their meeting came after Mr. Trump played golfed for the second straight day at his Turnberry course, this time with a group that included sons Eric and Donald Jr. The President's five-day visit to Scotland is built around golf and promoting properties bearing his name. A small group of demonstrators at the course waved American flags and raised a sign criticizing British Prime Minister Keir Starmer, who plans his own Turnberry meeting with Mr. Trump on Monday. Other voices could be heard cheering and chanting 'Trump! Trump!' as he played nearby. On Tuesday, Mr. Trump will be in Aberdeen, in northeastern Scotland, where his family has another golf course and is opening a third next month. The President and his sons plan to help cut the ribbon on the new course. Joining Ms. Von der Leyen were Maros Sefcovic, the E.U.'s chief trade negotiator; Björn Seibert, the head of Ms. Von der Leyen's Cabinet; Sabine Weyand, the commission's directorate-general for trade, and Tomas Baert, head of the trade and agriculture at the EU's delegation to the US. The deadline for the Mr. Trump administration to begin imposing tariffs has shifted in recent weeks but was now firm, the administration insisted. 'No extensions, no more grace periods. August 1, the tariffs are set, they'll go into place, Customs will start collecting the money and off we go," US Commerce Secretary Howard Lutnick told 'Fox News Sunday.' He added, however, that even after that 'people can still talk to President Trump. I mean, he's always willing to listen.' Without an agreement, the EU said it was prepared to retaliate with tariffs on hundreds of American products, ranging from beef and auto parts to beer and Boeing airplanes. If Mr. Trump eventually made good on his threat of tariffs against Europe, it could meant that everything from French cheese and Italian leather goods to German electronics and Spanish pharmaceuticals would be more expensive in the United States. The U.S. and Britain, meanwhile, announced a trade framework in May and a larger agreement last month during the Group of Seven meeting in Canada. Mr. Trump says that deal is concluded and that he and Mr. Starmer will discuss other matters — though the White House has suggested it still needs some polishing.
India.com
3 hours ago
- India.com
Bad news for employees of Ratan Tata's TCS, Satya Nadella's Microsoft, Intel as they plan to sack 50,000 employees due to...
Narayan Murthy and Late Ratan Tata- File image IT sector layoff: In a significant bad news for the global tech and IT sector and its millions of employees , three industry giants, Intel, Microsoft, and Tata Consultancy Services (TCS) have collectively announced over 50,000 job cuts in just one week. Readers should note that the massive layoffs wave mark one of the most significant employment disruptions in recent memory. Here are all the details you need to know about the massive layoff wave in the IT sector. Which IT jobs are under risk? Driven by the rapid adoption of artificial intelligence and shifting business priorities amid a broader push toward cost optimization, the major IT companies are taking the decision to reduce their workforce. The world already knows that Microsoft is planning to cut around 9,100 jobs globally, primarily targeting its Xbox, software, and cloud divisions as the company pivots more aggressively toward AI and flattens management structures. Which IT companies are firing on mass scale? Another major company, Intel, which is facing profitability pressures, is slashing over 5,000 roles across multiple US states as part of its strategy to become leaner and more agile. In another update, Ratan TCS, which is India's largest IT firm is trimming about 2% of its workforce, which may possibly impact more than 12,000 employees, especially at the mid- and senior levels, as automation. Why are IT companies doing mass-layoff? Experts say that these large-scale layoffs highlight a deeper structural shift across the tech industry, where AI is not just a tool but a trigger for disruption. As the IT companies are prioritizing more and more innovation and efficiency, traditional roles which were done by humans are rapidly being redefined or replacement.
Mint
4 hours ago
- Mint
TCS to lay off over 12,000 employees this year; mid, senior level staff to be impacted
New Delhi, Jul 27 (PTI) India's largest IT services firm, Tata Consultancy Services (TCS), is set to lay off about 2 per cent, or 12,261 employees, of its global workforce this year, with the majority of those impacted belonging to middle and senior grades. As of June 30, 2025, TCS's workforce stood at 6,13,069. It increased its workforce by 5,000 employees in the recently concluded April-June quarter. The move is part of the company's broader strategy to become a "future-ready organisation", focusing on investments in technology, AI deployment, market expansion, and workforce realignment, TCS said in a statement. "TCS is on a journey to become a Future-Ready organisation. This includes strategic initiatives on multiple fronts, including investing in new-tech areas, entering new markets, deploying AI at scale for our clients and ourselves, deepening our partnerships, creating next-gen infrastructure, and realigning our workforce model. "Towards this, a number of reskilling and redeployment initiatives have been underway. As part of this journey, we will also be releasing associates from the organisation whose deployment may not be feasible. This will impact about 2 per cent of our global workforce, primarily in the middle and the senior grades, over the course of the year," it said. TCS will provide appropriate benefits, outplacement, counselling, and support to the impacted employees, it added The move comes at a time when India's top IT services companies have delivered single-digit revenue growth in Q1FY26, capping off a somewhat-sobering June quarter as macroeconomic instability and geopolitical tensions weighed on global tech demand and delayed client decision-making. For TCS, the revenue rose 1.3 per cent year-on-year to ₹ 63,437 crore, bottomline improved 5.9 per cent to ₹ 12,760 crore in Q1FY26. TCS MD and Chief Executive K Krithivasan recently said the company is experiencing a "demand contraction" due to the continued uncertainties on the macroeconomic and geopolitical fronts, and added that he does not see a double-digit revenue growth in FY26. Krithivasan explained the delays in decision-making experienced in the preceding quarter have "intensified" now, and hoped for the discretionary spends - a prime mover of revenue growths for IT companies - would return once the uncertainties ebb. Microsoft, the second most valuable publicly listed company after Nvidia globally, has so far laid off over 15,000 employees in 2025, that is 7 per cent of the company's global workforce. In a memo to over 200,000 employees last week, Microsoft CEO Satya Nadella said the layoffs this year have been "weighing heavily" on him. "This is the enigma of success in an industry that has no franchise value,' he said in the memo to staff. He added: "Progress isn't linear. It's dynamic, sometimes dissonant, and always demanding. But it's also a new opportunity for us to shape, lead through, and have greater impact than ever before." According to - a platform that tracks global tech industry layoffs - over 80,000 tech workers have been laid off across 169 tech companies in 2025 alone. In 2024, that number stood at a staggering 1.5 lakh across 551 tech companies - the stark numbers coinciding as much with global macroeconomic woes as with deep debate in tech circles about the impact of AI on job roles, workforce, and employability.
