Summary
A major cyber espionage attack targeted Microsoft server software, affecting about 100 organizations, mainly in the US and Germany. The attack exploited a previously unknown flaw in SharePoint servers, but Microsoft quickly provided security updates to fix the issue.
Key Facts
- The cyber attack affected about 100 organizations using Microsoft server software.
- Two cybersecurity groups announced the discovery of the attack on Monday.
- The attack targeted self-hosted SharePoint servers, a tool for sharing documents, while Microsoft-hosted versions were not affected.
- The term "zero-day" refers to a flaw that hackers exploit before it's known or fixed.
- Most affected organizations were in the United States and Germany, including some government groups.
- Microsoft has issued security updates to help protect against this attack.
- The identity of the hackers remains unknown, and the FBI is investigating.
- Over 8,000 servers globally could potentially be at risk from similar attacks.