Microsoft server hack likely single actor, thousands of firms now vulnerable, researchers say
Microsoft
server software used by thousands of government agencies and businesses to share documents within organisations is likely the work of a single actor, a
cybersecurity researcher
said on Monday. Microsoft on Saturday issued an alert about "active attacks" on
SharePoint
servers used within organisations. It said that SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the exploit, also known as a "zero day" because it was previously unknown to cybersecurity researchers.
"Based on the consistency of the tradecraft seen across observed attacks, the campaign launched on Friday appears to be a single actor. However, it's possible that this will quickly change," Rafe Pilling, Director of Threat Intelligence at Sophos, a British cybersecurity firm.
That tradecraft included the sending of the same digital payload to multiple targets, Pilling added.
Microsoft said it had "provided security updates and encourages customers to install them," a company spokesperson said in an emailed statement.
It was not clear who was behind the ongoing hack. The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners, but offered no other details. Britain's National Cyber Security Centre did not immediately respond to a request for comment.
The Washington Post said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted U.S. and international agencies and businesses.
According to data from Shodan, a search engine that helps to identify internet-linked equipment, over 8,000 servers online could theoretically have already been compromised by hackers.
Those servers include major industrial firms, banks, auditors, healthcare companies, and several U.S. state-level and international government entities.
"The SharePoint incident appears to have created a broad level of compromise across a range of servers globally," said Daniel Card of British cybersecurity consultancy, PwnDefend.
"Taking an assumed breach approach is wise, and it's also important to understand that just applying the patch isn't all that is required here."
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Hindu
13 minutes ago
- The Hindu
Andhra Pradesh will be the best bet for investors from UAE, CM Chandrababu Naidu gives assurance
VIJAYAWADA Chief Minister N. Chandrababu Naidu requested Abdulla Bin Touq Al Marri, Minister of Economy & Tourism, UAE, to explore the investment opportunities in Andhra Pradesh (A.P.) especially in seaports, logistics, agriculture, shipbuilding, digital technologies, renewable energy and tourism sectors, while promising to extend all possible support to those coming forward to partner with the State in its development journey. 'I invite you to spend 25% of your time in our State and see our functioning. If you are not confident of our ability to deliver on our promises, you can leave us', Mr. Naidu told Mr. Al Marri, seeking to impress upon him the effectiveness of A.P. Government's hand-holding to investors. Andhra Pradesh Chief Minister Chandrababu Naidu leading a high-level team to Singapore from July 26 Participating as the chief guest at an investor meet jointly organised by the Confederation of Indian Industry (CII) and Investopia, a UAE-based global investment platform, in Vijayawada on Wednesday (July 23, 2024), Mr. Naidu said the A.P. Government was committed to giving time-bound clearances to proposals put forth by entrepreneurs and the State was transitioning from Ease to Speed of Doing Business, and the CMO was directly monitoring the status of projects. He noted that Andhra Pradesh was rich in agriculture and water resources, was endowed with a 1,053 km-long coastline, it has a string of seaports and upcoming airports and skilled human resources, well-established rail and road networks and multiple other advantages beckoning investors. Naidu releases report of Task Force on Economic Development for Swarna Andhra Pradesh 'The UAE Government and entrepreneurs should see for themselves the opportunities and they can be assured of all full support. The A.P. Government introduced 15 sector-specific policies and was offering a slew of incentives to those putting their money in the State,' the CM mentioned. Mr. Naidu said the A.P.-UAE bilateral trade last year amounted to $1.45 billion (approximately ₹12,500 crore) and there was tremendous scope for increasing it as the State moved forward in alignment with the goals laid down by the Prime Minister Narendra Modi in his vision of Viksit Bharat. He said a British company came forward to set up a green ammonia plant in Krishnapatnam, DP World evinced interest in working with the A.P. Government in the development of the maritime sector and many other prospective investors were in touch with the State, reiterating that A.P. would be the best bet for investors from the UAE. Andhra Pradesh Industries & Commerce Minister T.G. Bharat, A.P. Government Chief Secretary K. Vijayanand, LuLu International CMD M.A. Yousuff Ali, Investopia CEO Jean Fares and CII President Designate R. Mukundan spoke in the inaugural session. Later, the A.P. Government and Investopia announced the signing of an MoU for collaboration in promoting investments. A.P. Economic Development Board CEO C.M. Saikanth Varma and Mr. Fares exchanged copies of the agreement.
India Today
13 minutes ago
- India Today
Microsoft Surface Laptop 7 with 5G is here but only for these buyers and it costs a bomb
Microsoft has launched a new variant of its Surface Laptop 7, and this time, it comes with built-in 5G support. But there's a catch — this version, officially called the Microsoft Surface Laptop 5G, is aimed only at business customers for now. So, if you're a regular buyer looking to upgrade your laptop with mobile connectivity, you're out of luck — at least for now. The Surface Laptop 5G starts at a steep price of $1,799.99 in the US (roughly Rs 1,55,500), and it's part of Microsoft's growing Copilot+ PC line-up for enterprise users. That price gets you 16GB of RAM, 256GB SSD storage, and the promise of fast, always-on connectivity with a dedicated Copilot key for AI-powered Surface Laptop 5G is built around a 13.8-inch PixelSense Flow touchscreen with a sharp 2,304 x 1,536 resolution and a 120Hz refresh rate. It supports Dolby Vision IQ, and for durability, the display is protected by Corning Gorilla Glass 5. Under the hood, the laptop runs on Intel's Core Ultra 5 Series 2 processor, paired with Intel Arc graphics. There's also a dedicated AI Boost NPU (Neural Processing Unit), which Microsoft says can handle over 40 trillion operations per second (TOPS). That's the sort of muscle needed for tasks like real-time transcription, image processing and background blur during video calls — all done locally on the buyers can also opt for a higher-end variant with 32GB RAM, priced at $2,099.99 (roughly Rs 1,81,000). Microsoft says the laptop was designed from the ground up with 5G in mind, rather than just adding a modem as an afterthought. The Surface Laptop 5G features six strategically placed antennas that adapt to your surroundings to ensure strong and stable connections, whether you're indoors, on the move, or working remotely. It supports both Nano SIM and eSIM for global connectivity, and can also double up as a mobile hotspot. The machine weighs under 1.4kg, making it light enough to carry around without trouble. Battery life is rated for up to 20 hours of video playback or 12 hours of active web use, thanks to a 54Wh battery. Connectivity options are solid as well — Wi-Fi 7, Bluetooth 5.4, GPS, and of course, 5G. Port selection includes two USB 4.0 Type-C ports (with Thunderbolt 4), a USB Type-A port, a 3.5mm headphone jack, and Microsoft's proprietary Surface Connect expected for a business-focused machine, security is a big part of the offering. You get Windows Hello for face unlock, TPM 2.0 support, Microsoft Pluton security chip, BitLocker encryption, and even an optional smart card reader. The laptop runs on Windows 11 Pro, and since it's part of the Copilot+ PC range, there's a dedicated Copilot key to access AI tools Microsoft Surface Laptop 5G will be available in the US starting August 26 and comes in two colours — Black and Platinum. Regular users will have to wait and see if a consumer version becomes available later.- Ends
News18
22 minutes ago
- News18
Turkiye and Britain sign preliminary deal for Eurofighter Typhoon jets
Last Updated: Ankara (Turkiye), Jul 23 (AP) Turkiye and Britain on Wednesday signed a preliminary agreement for the sale of Eurofighter Typhoon fighter jets to Turkiye, a significant step in Ankara's efforts to modernise its air fleet. Turkish Defence Minister Yasar Guler and his British counterpart, John Healey, inked a memorandum of understanding during a defence industry fair in Istanbul, Turkiye's Ministry of National Defence said. NATO member Turkiye has long aimed to buy 40 Eurofighter jets, which are built by a consortium of British, German and Italian companies. Germany reportedly initially opposed the sale but later reversed its position. Britain led negotiations on behalf of the consortium. A Turkish defence ministry statement said the memorandum takes the two countries 'one step closer to a full agreement on the Typhoon." 'Both Ministers welcome signature as a positive step towards bringing Turkiye into the Typhoon club and share a mutual ambition to conclude the necessary arrangements as soon as possible," it added. Turkish officials have said that they are still negotiating over pricing and technical terms, saying that they have received an initial offer and expect to submit a counter-proposal. Turkiye is also developing a domestic fifth-generation fighter jet, the KAAN, which is slated to be operational in 2028. (AP) SKS NSA NSA view comments First Published: July 23, 2025, 16:15 IST Disclaimer: Comments reflect users' views, not News18's. Please keep discussions respectful and constructive. Abusive, defamatory, or illegal comments will be removed. News18 may disable any comment at its discretion. By posting, you agree to our Terms of Use and Privacy Policy.
