Risk highlighted as Chinese hackers hit Microsoft
While such cyberattacks are not new, the scale of the onslaught and the speed with which the hackers took advantage of freshly discovered vulnerabilities is fueling concern.
Dutch startup Eye Security warned Saturday of online attacks targeting SharePoint file-sharing servers, with Microsoft quick to confirm the report and release patches to protect systems.
The vulnerability allowed hackers to retrieve credentials and then access SharePoint servers kept at users' facilities, according to Microsoft.
Cloud-based SharePoint software was safe from the problem, the company said.
Eye Security determined that more than 400 computer systems were compromised by hackers during waves of attacks.
Targets included government organizations in Europe, the Middle East and the United States - among them the US nuclear weapons agency, media reports indicated.
"On-premises SharePoint deployments - particularly within government, schools, healthcare and large enterprise companies - are at immediate risk," cybersecurity firm Palo Alto Networks warned in a note.
Microsoft has not disclosed the number of victims in the attacks.
SharePoint had more than 200 million active users as of 2020, according to the most recent figures available from Microsoft.
Microsoft has attributed the cyberattacks to groups backed by China.
The culprits are believed to include Chinese state actors known as Linen Typhoon and Violet Typhoon along with a group called Storm-2603 which "is considered with moderate confidence to be a threat actor based in China."
The Typhoon groups have been active for a decade or more, and are known for intellectual property theft as well as espionage, according to Microsoft.
Less was known about Storm-2603 and its motives.
"Investigations into other actors also using these exploits are ongoing," Microsoft said, urging users to patch SharePoint servers to avoid becoming hacking victims.
Cybersecurity specialist Damien Bancal noted in a recent blog post that he found "ready-to-use exploit code" for the vulnerability at a popular website.
The assault on SharePoint servers is the latest in a series of sophisticated attacks carried out by state-sponsored groups against "the Microsoft ecosystem," according to Bancal.
In 2021, attacks by a Chinese hacker group known as Silk Typhoon compromised tens of thousands of email servers using Microsft Exchange software.
Microsoft's success at making its software commonplace in offices and homes also makes it a prime target for hackers out to steal money or information.
Microsoft software can hold sensitive and valuable information.
"It's not Microsoft that is being targeted, it's its customers," said Shane Barney, head of information security at US-based Keeper.
Targeting Microsoft programs is a means to an end, and tomorrow it could be software from another company, said Rodrigue Le Bayon, head of Orange Cyberdefense computer emergency response team.
China is not the only nation backing hacker operations as countries around the world hone cyber capabilities, according to Le Bayon.
Nevertheless, China is repeatedly singled out by companies and goverments hit by hacks.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Economic Times
14 minutes ago
- Economic Times
Broadcom launches Jericho chip to advance AI data center networks
Broadcom's silicon division launched its next-generation Jericho networking chip on Monday, which is designed to connect data centers over 60 miles (96.5 km) apart and speed artificial intelligence computation The company's Jericho4 introduces and improves several features that increase the amount of networking traffic speeding across large networks that operate inside and between data and deploying artificial intelligence has become more computationally intensive and requires stringing together thousands of graphics processors (GPUs). Cloud computing companies such as Microsoft and Amazon require faster, more sophisticated networking chips to ensure data moves when transferring data beyond the physical walls of a data center is crucial for cloud companies because of the potential attacks that could intercept it ahead of reaching its engineers designed the Jericho chips to be deployed at a massive scale, and a single system can encompass roughly 4,500 chips, according to Ram Velaga, senior vice president and general manager of Broadcom's Core Switching help mitigate issues around network congestion, the Jericho4 chips use the same high-bandwidth memory (HBM) designers such as Nvidia and AMD use for their AI processors. It's necessary because of the volume of data that needs to be stuffed into memory at any given moment of operation."The switch is actually holding that traffic (in memory) till the congestion frees up," Velaga said. "It means you need to have a lot of memory on the chip."The longer the distance the data must travel from the chip to its destination, the more memory designers must include in the chip as addition to performance improvements, the Jericho4 also beefs up security by encrypting opted to use TSMC's three nanometer process for the Jericho4.
Time of India
40 minutes ago
- Time of India
New space race: Acting Nasa chief Duffy to announce plan for building nuclear reactor on moon this week- Here's what we know
US transportation secretary Sean Duffy is set to reveal accelerated plans for constructing a lunar nuclear reactor this week, marking his first significant initiative as Nasa 's interim administrator. According to documents reviewed by POLITICO, this announcement will establish a clearer timeline for the lunar reactor project, despite Nasa facing substantial budget reductions. This initiative demonstrates Duffy's intention to influence Nasa's policy direction, even as he faced criticism for managing dual roles. "It is about winning the second space race," said a Nasa senior official, granted anonymity to discuss the documents ahead of their wider release. Following a disagreement with Tesla CEO Elon Musk in July, President Donald Trump appointed Duffy after withdrawing billionaire Jared Isaacman's nomination. Duffy has also issued instructions to expedite the International Space Station's replacement. These decisions could enhance American progress towards lunar and Martian missions, objectives that China is also pursuing. These initiatives reflect the Trump administration's emphasis on human spaceflight. The White House's 2026 budget proposal increases funding for crewed missions whilst significantly reducing other programmes, including a nearly 50 per cent reduction in science mission funding. The reactor initiative requires Nasa to request industry proposals for a 100 kilowatt nuclear reactor, targeting a 2030 launch date, crucial for lunar astronaut missions. Previously, Nasa funded research for a 40 kilowatt lunar reactor, planning deployment in the early 2030s. The directive warns that the first nation to establish a reactor could "declare a keep-out zone which would significantly inhibit the United States," reflecting concerns about a China-Russia collaborative project. Nasa must appoint a project leader and gather industry feedback within 60 days. The 2030 launch target aligns with China's planned first lunar landing. Nasa maintains involvement in nuclear development despite the Pentagon's recent termination of a joint nuclear-powered rocket engine programme. "While the budget did not prioritise nuclear propulsion, that wasn't because nuclear propulsion is seen as a non-worthy technology," the Nasa official stated. The space station directive seeks to replace the current International Space Station with commercial alternatives through revised contract procedures. Nasa intends to award contracts to at least two companies within six months of the proposal request. The goal is to establish a new station by 2030, preventing China from being the sole operator of a crewed orbital station. Several companies, including Axiom Space, Vast, and Blue Origin, have shown interest. However, legislators have expressed worry about insufficient funding allocation speed.
&w=3840&q=100)
First Post
44 minutes ago
- First Post
Despite chatter, PM Modi unlikely to attend China's World War II victory parade, 5 reasons
Prime Minister Narendra Modi is unlikely to attend China's World War II Victory Day parade as gaps outweigh recent signs of a thaw in India-China relations read more Despite some speculation and suggestions, it appears increasingly unlikely that Prime Minister Narendra Modi will attend China's World War II Victory Day parade scheduled for early September in Beijing. While bilateral relations between India and China have experienced a tentative thaw, multiple diplomatic, strategic and domestic considerations stand in the way of such a high-profile appearance. 1. Improved ties, but not enough yet India and China have indeed shown signs of recalibration in their strained ties. Recent months have seen a flurry of diplomatic engagement, including visits by External Affairs Minister S Jaishankar and National Security Adviser Ajit Doval to China. In response, Beijing's resumption of pilgrimages to Tibet and New Delhi restoring visa services for Chinese nationals signal a cautious detente. However, caution is the key word against overinterpreting these developments. Ivan Lidarev, a visiting fellow at the Institute of South Asian Studies in Singapore, points out to South China Morning Post that while ties have improved, they have not reached a point where Prime Minister Modi's participation in a Chinese military event would be politically or diplomatically appropriate. Such a visit would be viewed as more than ceremonial—it would symbolise a radical diplomatic shift that current circumstances do not support. STORY CONTINUES BELOW THIS AD 2. Trade tensions and mistrust still simmer Bilateral trade between the two Asian giants surpassed $127 billion last year, but the economic relationship remains uneven and frequently contentious. India continues to express concern over what it sees as 'trade weaponisation' by China—ranging from export curbs on key inputs like rare earth magnets and fertilisers to trans-shipment and dumping practices that hurt Indian industries, the BBC reports. China's restriction on rare earth exports in particular has alarmed Indian manufacturing sectors, which rely heavily on these materials for automobiles, appliances and clean energy technologies. As former diplomat Phunchok Stobdan points out to BBC, such moves by Beijing are viewed in New Delhi as economic coercion aimed at pressuring India strategically. These unresolved frictions diminish the feasibility of Modi endorsing a military celebration that could be seen as legitimising China's broader geopolitical posture. 3. Why endorsement of China's military narrative is a red line The nature of China's World War II Victory Day parade—commemorating its triumph over Japan—is itself diplomatically charged. For India, a Quad partner with Japan, Australia and United States, attending such an event could be interpreted as aligning with China's historical and strategic worldview. This would carry particular weight in China's case, given its border claims over Indian territory and continued strategic cooperation with Pakistan. During Operation Sindoor in May, China's active help to Pakistan, which used Chinese-made J-10C fighter jets in the military clash with India, has only deepened suspicions in New Delhi. This does not align with India's approach either diplomatically or militarily. 4. Domestic interests prevail For Prime Minister Modi, India's domestic interests rank way incomparably above attendance at a Chinese state parade. Complicating matters further is the fluid state of global diplomacy, particularly with United States under President Donald Trump's second term. Trump's erratic overtures—such as his self-proclaimed mediation during the India-Pakistan clash and overt friendliness toward the Pakistani military—have left India feeling vulnerable and recalibrating its strategic autonomy. Prime Minister Modi's foreign policy in recent years has sought to balance ties with major powers, maintaining India's traditional non-alignment while leveraging partnerships where necessary. Appearing at a parade also attended by Russian President Vladimir Putin and possibly key Pakistani leaders could be interpreted as aligning with a China-Russia axis—something India is unlikely to embrace when its Quad ties and economic negotiations with the West remain critical. STORY CONTINUES BELOW THIS AD 5. A calculated distance While the SCO summit in Tianjin at the end of August may offer a more acceptable venue for diplomatic engagement, a front-row seat at a military parade in Beijing is another matter entirely. Attending it would risk misinterpreting India's strategic intent and strain ties with critical partners like Japan and US. For now, Prime Minister Modi is more likely to reaffirm India's independent stance through measured diplomatic gestures. The global order is still in the flux under the impact of US President Donald Trump-induced trade and tariff wars. Trump's off the cuff remarks on serious issues of diplomacy, geostrategy and global economy have further complicated the international order. Each country is trying to readjust its policies with the US and the rest of the top powers. India-China ties too are going through a phase of recalibration. PM Modi's speculated visit, if becomes a reality, would give a finality in India's shift in its China policy, but the government has not given any such concrete signal yet.
