Microsoft got with Attack SharePoint – one version of -still vulnerable

Microsoft warned of “active attacks” aimed at it SharePoint Software for cooperation, and security researchers point out that organizations around the world can affect the violation.

Agency for Cybersecurity and Infrastructure – Note On Sunday, the release that vulnerability provides unauthorized access to systems and full access to SharePoint content, allowing poor actors to follow the network code.

CISA said that while the area of action and impact of the attack continues to be evaluated, the agency warned that it “pose a risk to organizations”.

Microsoft at the end of Sunday released fixes for customers who can apply for two versions of the SharePoint software. Another 2016 version remains vulnerable and the company – Note It is working on the development of the patch.

The researchers in Palo Alto Networks He said Hack probably reached thousands of organizations around the world.

“The feats are real, in the indentation and pose a serious threat,” they added.

CNBC addressed Microsoft for additional comments and information.

In prevention On Saturday, Microsoft said the attack is only extended to local sharePoint servers, not the ones in the cloud like Microsoft 365. SharePoint Software is commonly used by global enterprises and organizations for storage and cooperation in documents.

The vulnerability is especially true of what allows hackers to betray themselves with users or services even after fixing the SharePoint server, In the hall For the European Cybersecurity researchers, the eye security firm states that he first determined the deficiency.

SharePoint servers often connect to other Microsoft services, such as Outlook and team, which means that such a violation can “quickly” lead to data theft and password cleaning, said security researchers.

Separately, Alaska Airlines The briefly stopped its ground operations about three hours on Sunday with the IT disabilization. It lifted Ground stop Approximately 2am at EST, the carrier said.

It was unclear whether the SharePoint attack was linked.