Microsoft server hack has now hit 400 victims, researchers say
UNITED STATES, JUL 23 – Chinese state-sponsored hackers exploit unpatched Microsoft SharePoint flaws to deploy ransomware and steal data, rapidly increasing victims to over 400, including key U.S. government agencies.
- About 400 organizations have fallen victim to a campaign exploiting SharePoint vulnerabilities, Eye Security said, highlighting the campaign's global impact and urgency.
- Ronen Ahdut identified two vulnerabilities, CVE-2025-53770 and CVE-2025-53771, in Microsoft SharePoint servers, enabling remote code execution and web shell placement, respectively.
- Eye Security said the figure is likely an undercount, Vaisha Bernard warned `There are many more, because not all attack vectors have left artifacts that we could scan for`.
- On July 19, Microsoft confirmed that Storm-2603 is deploying Warlock ransomware via the exploit, urging immediate updates to on-premises SharePoint environments.
- With a public exploit now available, automated attacks against unpatched systems are set to grow, increasing risk of widespread ransomware deployment, as CISA explained that `ToolShell’ provides unauthenticated access to systems and enables malicious actors to fully access SharePoint content… and execute code over the network.
59 Articles
59 Articles
Microsoft alerts about a security flaw in its SharePoint software, exploited by Chinese hackers to access sensitive data Several groups of Chinese hackers have exploited a
Microsoft SharePoint attacks ensnare 400 victims, including federal agencies
The fallout from an attack spree targeting defects in on-premises Microsoft SharePoint servers continues to spread nearly a week after zero-day exploits were discovered, setting off alarms across the globe. More than 400 organizations have been actively compromised across four waves of attacks, according to Eye Security. Multiple government agencies, including the Departments of Energy, Homeland Security and Health and Human Services, have been …
Coverage Details
Bias Distribution
- 54% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium