Microsoft flaw put 400 organizations at risk

A large-scale cyber-espionage campaign exploiting a vulnerability in Microsoft’s SharePoint software platform has so far registered at least 400 organizations as victims. This was reported by specialists at the Netherlands-based company Eye Security.

Earlier, it was said that 100 organizations were affected by the attack, but subsequent investigations show that the actual scale is much larger. Experts note that this number is still incomplete, as not all traces of the attacks have been identified.

"Not all artifacts left by the attack have been scanned. Therefore, the actual number of affected organizations may be even higher," said Vaisha Bernard, lead specialist at Eye Security.

Security flaw and accusations involving China
The attacks began after a security vulnerability in Microsoft’s SharePoint server software was not fully resolved. Once the flaw was discovered, cybercriminals began actively exploiting it, while Microsoft attempted to patch it.

According to experts from Microsoft and Google, Chinese hackers may be behind the attack. However, Beijing has denied these claims.

The list of affected organizations has not yet been fully disclosed. Bernard declined to reveal their identities. Read 'Zamin' on Telegram!