Microsoft announced hackers exploited a “zero-day” vulnerability in an on-premise SharePoint server and at least three China-based hacking groups have exploited the breach, potentially as early as 7 July, Axios reports. Security researchers indicated organizations relying on SharePoint are “sitting ducks” as hackers have reportedly stolen machine keys that could allow for subsequent hacks of organizations once the SharePoint vulnerability is patched. There are more than 100 estimated victims that include federal and state agencies, universities and utility companies.
Full story