Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks

More than 400 organizations have been compromised in the Microsoft SharePoint attack, according to Eye Security, which initially sounded the alarm on the mass exploitation last Friday, even before Redmond confirmed the critical vulnerabilities. The Dutch security company on Wednesday reported four waves of attacks beginning …

[elDog]

"... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

Maybe Microsoft should shift the blame to itself instead. Haven't they cut their QA and other staff drastically?

[IGotOut]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

Yes, but, but...AI....

[ecofeco]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

For 20 twenty years.

[VoiceOfTruth]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

I blame Google and MS for scanning all of my data for the NSA.

[Fuzzy Fitzpatrick]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

Imagine being so cynical that you’d hold Microsoft responsible for its shit software and endless vulnerabilities instead of the data thieves and cyberspies!

[cookiecutter]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

"but but but AGILE is great! Developers should be facilitated to deliver faster and faster and break things!!"

"but but but all software has bugs and even software that has risk to life uses CAN'T be expected to be bug free!!"

"even if a product is absolutely perfect for everything that you do....you MUST SPEND MONEY on new versions!!! Mamon MUST be PAID!!"

FFS this industry is full of morons and boot lickers who'll forgive anything...mostly software people & MBAs who wouldn't understand the concept of REAL Engineering & creating a GOOD product.

There are TWO things that would make the World a better place.....

Fashion Students spend the 1st month of their courses being beaten with a metal ruler until they understand the concept of standard measurements

MBA's & Software Developers spend a year on a wood working course creating ACTUAL product to understand pride in your work and quality

[Anonymous Coward]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

Yet still M&S jeans exactly the same in one colour fit me, but in another don’t <double Picard>.

[sanmigueelbeer]

Re: "... and Microsoft have blamed Chinese cyberspies and data thieves for the digital intrusions"

Did the bad actors hit where it would hurt the most: DOGE?

[mikus]

Worst run organizations list

If you still run ancient sharepoint servers for any particular reason in 2025, you make the list of the worst run organizations on the planet.

[Anonymous Coward]

Re: Worst run organizations list

"If you still run sharepoint servers for any reason in 2025...."

Fixed that.

[fandom]

Re: Worst run organizations list

What do mean by 'ancient', june this year?

[Roland6]

Re: Worst run organizations list

“Ancient” ::= pre-cloud and in this instance pre 365..

There again, given how things have progressed even 365 could be considered “ancient”.

[Anonymous Coward]

"You want to what? Put the national nuclear missile secrets into a SharePoint exposed to the Internet? Oh yeah sure, I reckon that will be fine. Go for it. What's the worst that could happen?".

[fg_swe]

Worse

They do not handle the missile, they do the warheads.

[druck]

Re: Worse

Nothing important then.

[herman]

Sharepoint has always been terrible. The hacking does not really make it any worse.

[Ididntbringacoat]

Naive? Gullible? Is there a difference?

I am (almost) always astonished at how easily and eagerly People and Organizations fall for utter BS, such as "secure cloud" services.

Or, anything from Microsoft, I guess.

[SVD_NL]

Re: Naive? Gullible? Is there a difference?

To be fair, this vuln specifically did not impact their cloud versions, just their on-prem offerings...