Microsoft confirms SharePoint hack affecting worldwide users

Microsoft has confirmed a widespread hack targeting its SharePoint collaboration software, affecting businesses and government agencies across the globe.

The US Cybersecurity and Infrastructure Security Agency (CISA) said the vulnerability allows attackers to access file systems, view SharePoint content, and execute code remotely—without authentication.

The agency warned that the breach “poses a risk to organizations” as the full scope is still being evaluated.

Microsoft issued emergency patches for two affected versions of SharePoint, but said the 2016 version remains vulnerable while a fix is being developed.

Cybersecurity researchers at Palo Alto Networks estimate that thousands of organizations globally have already been compromised. “The exploits are real, in-the-wild and pose a serious threat,” they said.

Eye Security, the firm that first identified the flaw, noted that attackers can still impersonate users or services even after patches are installed. Because SharePoint often integrates with other Microsoft tools like Outlook and Teams, researchers warn the breach could quickly lead to broader system access, data theft, and password harvesting.

“Once inside, they’re exfiltrating sensitive data, deploying persistent backdoors, and stealing cryptographic keys,” said Michael Sikorski, CTO of Palo Alto’s Unit 42.

Microsoft clarified that only on-premises SharePoint servers are affected. Cloud-based services like Microsoft 365 remain secure.

Meanwhile, Alaska Airlines briefly halted ground operations on Sunday due to an IT outage. It’s still unclear if that disruption is connected to the SharePoint hack.

(CNBC)

ALSO READ TOP STORIES FROM NIGERIAN TRIBUNE