Tag: compromised
-
Slashdot: Microsoft Says Some SharePoint Server Hackers Now Using Ransomware
Source URL: https://it.slashdot.org/story/25/07/24/1359230/microsoft-says-some-sharepoint-server-hackers-now-using-ransomware?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Says Some SharePoint Server Hackers Now Using Ransomware Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a cyber-espionage campaign, specifically by a group referred to as “Storm-2603,” that has transitioned from conventional data theft to deploying ransomware. This represents a worrying trend in cyber threats,…
-
The Register: Compromised Amazon Q extension told AI to delete everything – and it shipped
Source URL: https://www.theregister.com/2025/07/24/amazon_q_ai_prompt/ Source: The Register Title: Compromised Amazon Q extension told AI to delete everything – and it shipped Feedly Summary: Malicious actor reportedly sought to expose AWS ‘security theater’ The official Amazon Q extension for Visual Studio Code (VS Code) was compromised to include a prompt to wipe the user’s home directory and…
-
The Register: Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks
Source URL: https://www.theregister.com/2025/07/23/microsoft_sharepoint_400_orgs/ Source: The Register Title: Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks Feedly Summary: US DOE among breached government agencies More than 400 organizations have been compromised in the Microsoft SharePoint attack, according to Eye Security, which initially sounded the alarm on the mass exploitation last Friday, even before Redmond…
-
Slashdot: US Nuclear Weapons Agency ‘Among 400 Organizations Breached By Chinese Hackers’
Source URL: https://news.slashdot.org/story/25/07/23/1652240/us-nuclear-weapons-agency-among-400-organizations-breached-by-chinese-hackers?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Nuclear Weapons Agency ‘Among 400 Organizations Breached By Chinese Hackers’ Feedly Summary: AI Summary and Description: Yes Summary: A cyber-espionage campaign targeting unpatched Microsoft SharePoint vulnerabilities has compromised around 400 organizations globally, including significant US government agencies. This underscores the critical need for robust patch management and security…
-
The Register: Microsoft patches critical SharePoint 2016 zero-days amid active exploits
Source URL: https://www.theregister.com/2025/07/22/microsoft_sharepoint_2016_patch/ Source: The Register Title: Microsoft patches critical SharePoint 2016 zero-days amid active exploits Feedly Summary: Admins urged to rotate machine keys, restart IIS after emergency fix Microsoft has good news for administrators running SharePoint Server 2016. The cloud and software megacorp has published updates to close a gaping hole in the document…
-
Cisco Talos Blog: ToolShell: Details of CVEs Affecting SharePoint Servers
Source URL: https://blog.talosintelligence.com/toolshell-affecting-sharepoint-servers/ Source: Cisco Talos Blog Title: ToolShell: Details of CVEs Affecting SharePoint Servers Feedly Summary: Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal vulnerabilities affecting SharePoint Server Subscription Edition, SharePoint Server 2016, and SharePoint Server 2019. AI Summary and Description: Yes **Summary:**…