Microsoft alerts businesses, governments to server software attack
WASHINGTON (AGENCIES)Microsoft has issued an alert about "active attacks" on server software used by government agencies and businesses to share documents within organisations, and recommended security updates that customers should apply immediately.In an alert issued on Saturday, Microsoft said the vulnerabilities apply only to SharePoint servers used within organisations. It said that SharePoint Online in Microsoft 365, which is in the cloud, was not hit by the attacks.
"We've been coordinating closely with CISA, DOD Cyber Defence Command and key cybersecurity partners globally throughout our response," a Microsoft spokesperson said, adding that the company had issued security updates and urged customers to install them immediately.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Arabian Post
12 hours ago
- Arabian Post
Microsoft unveils most reliable Windows 11 version yet
Microsoft has officially launched the Windows 11 24H2 update, which the company claims to be the most reliable version of its operating system to date. The release comes with various new features and improvements, aiming to provide a more seamless and efficient experience for both casual users and businesses. One of the most notable changes is the focus on enhancing system stability and performance. Microsoft has been working hard on optimising the user experience, addressing complaints about performance issues that have plagued earlier updates. This is particularly important for enterprise users who depend on smooth, uninterrupted workflows. The 24H2 update includes updates to key system components that should improve overall speed, responsiveness, and reliability. Microsoft's commitment to offering a smoother user experience is apparent through its focus on feedback-driven updates. The company has integrated several improvements based on customer suggestions, with special attention given to the performance of older devices. Additionally, many users will appreciate the fact that the update aims to reduce the bloatware found in earlier versions, making it more efficient in terms of resource use. ADVERTISEMENT Another significant development with the 24H2 update is the inclusion of enhanced security measures. As cyber threats continue to evolve, Microsoft has added more robust protections within Windows 11, making the OS more resilient against potential vulnerabilities. The new security features come as part of an ongoing effort to address the increasing threats in the digital landscape. The integration of better encryption standards and more advanced threat detection tools ensures that Windows 11 is prepared to meet the demands of a rapidly changing security environment. Microsoft's cloud-centric approach is also reflected in this update, with better integration of cloud services across the OS. These updates come at a time when more businesses and individuals are shifting to remote work models, making it easier for users to access their files and applications from anywhere. The cloud-based features provide more flexibility, particularly for users who require consistent access to data across multiple devices. For gamers, Windows 11 24H2 introduces performance enhancements designed to optimise gaming experiences. With the ongoing rise in gaming popularity, Microsoft has invested in refining tools for a more fluid and immersive gaming experience. This includes optimisations for DirectStorage and Auto HDR, which are designed to reduce load times and improve graphical fidelity, providing a more immersive experience. However, it is not just about the functionality; user interface improvements are also a key highlight. The 24H2 update brings several design changes aimed at making the system feel more modern and intuitive. The Start Menu and taskbar have undergone minor tweaks to streamline workflows, while the introduction of new accessibility features ensures that the OS is usable for a wider range of people, including those with disabilities. Despite the promise of improvements, the transition to Windows 11 24H2 may not be without challenges for some users. Those still using legacy hardware or older devices may find that the update requires more resources than their systems can provide. As with any major operating system upgrade, there is always the possibility of incompatibilities with certain third-party software or hardware. Users have been advised to check compatibility before proceeding with the installation. For businesses, the upgrade to Windows 11 24H2 promises a more stable and secure environment, but the decision to roll it out will depend on specific use cases and existing IT infrastructure. Some enterprises might opt for a slower rollout to ensure compatibility with essential applications and systems. However, given the focus on reliability and performance, it is likely that many organisations will embrace this update sooner rather than later. Looking ahead, Microsoft has indicated that Windows 11 24H2 marks the beginning of a more consistent and regular update cycle. The company has committed to releasing updates more frequently to ensure that Windows remains competitive and secure in the evolving tech landscape. This marks a shift from the more sporadic and sometimes unpredictable update schedules of previous versions.
Arabian Post
12 hours ago
- Arabian Post
Octa market outlook: navigating one of the most eventful weeks of the year
KUALA LUMPUR, MALAYSIA – Media OutReach Newswire – 28 July 2025 – Forex traders are bracing for what could be one of the most pivotal trading weeks of the year. The calendar is packed with high-impact releases that could send shockwaves through the markets, potentially even temporarily halting trading altogether as global economies digest a barrage of critical data. From central bank decisions to blockbuster economic reports, this week is shaping up to be a rollercoaster for volatility, and traders need to be on high alert. Octa Broker is providing an in-depth overview of the week's key events and actionable insights to help traders navigate this high-stakes environment with confidence. A packed calendar: why this week stands out 'This is one of the busiest weeks I've seen in my career,' says Kar Yong, financial market analyst at Octa Broker. 'I've been in the markets for a long time, and I can genuinely say I've rarely witnessed such a major concentration of important events packed into a single week. Traders need to be exceptionally vigilant and prepared for rapid shifts.' Indeed, this will be a rather heavy week with a massive amount of event risk. It features the crucial U.S. Gross Domestic Product (GDP) report, decisions from three major G7 central banks, including the Federal Reserve (Fed), several key inflation reports, and, arguably the most volatility-inducing event in the Forex calendar, the Nonfarm Payroll (NFP) report. Adding to this potent mix, the International Monetary Fund (IMF) will release its World Economic Outlook on Tuesday, offering a global economic snapshot, while the looming 1 August deadline for U.S. reciprocal tariffs adds a geopolitical wildcard. Furthermore, some of the world's biggest companies will be reporting their quarterly earnings, particularly Microsoft, Apple, Meta, Amazon, Visa, Mastercard, Procter&Gamble, Hermes, HSBC, Exxon Mobil, and Chevron. ADVERTISEMENT While it's not unusual for some weeks to carry more weight than others, the upcoming slate of events is exceptional in both volume and significance and suggests a truly historic period for the financial markets. Here's a list of some of the major news releases to keep an eye on: Tuesday, 29 July World IMF World Economic Outlook United States Trade Balance United States JOLTS Job Openings United States CB Consumer Confidence United States Earnings: Visa United States Earnings: P&G Wednesday, 30 July Australia Inflation Rate (CPI) Eurozone GDP United States ADP Employment United States GDP Canada BoC Interest Rate Decision United States Fed interest Rate Decision United States Earnings: Microsoft United States Earnings: Meta United States Earnings: Hermes United States Earnings: HSBC Thursday, 31 July China NBS Manufacturing and Services PMI Japan BoJ Interest Rate Decision Germany Inflation Rate (CPI) Canada GDP United States PCE Price Index United States Earnings: Apple United States Earnings: Amazon United States Earnings: Mastercard Friday, 1 August World U.S. reciprocal tariffs to go into effect Eurozone Inflation Rate (CPI) United States NFP United States ISM Manufacturing PMI United States Earnings: Exxon Mobil United States Earnings: Chevron See also Jurassic World: The Experience Roars Into Bangkok - 8 August 2025 At Asiatique The Riverfront Destination As you can see, this is an extremely long list that features some heavyweights. In terms of the top scheduled events, we need to pick and choose what is going to carry the greatest influence. From a global macro perspective, the primary focus is still likely to remain firmly on the ongoing tariff developments. Kar Yong comments: 'Although the U.S. has recently inked new trade deals with several countries, notably the United Kingdom, Japan, and the Eurozone, the 1 August deadline still looms large for other nations. There remains considerable uncertainty surrounding potential trade resolutions with key economies such as Mexico, Canada, China, South Korea, Taiwan, Brazil, and Singapore, among others. Any headlines or official statements regarding these negotiations could trigger significant market reactions.' This tariff tension could weigh heavily on currency pairs like USD/BRL, USD/CNY, and USD/CAD, as markets react to both policy announcements and speculative headlines. Traders should monitor news wires closely, as any breakthroughs—or breakdowns—in trade talks could trigger sharp moves. Beyond tariffs, the week's economic calendar is brimming with catalysts: ADVERTISEMENT U.S. GDP and Nonfarm Payrolls. The Q2 GDP report on Wednesday will provide a snapshot of U.S. economic health, while Friday's NFP report could sway expectations for Fed policy. Strong data could bolster the USD, while weaker prints might fuel rate-cut speculation. The Q2 GDP report on Wednesday will provide a snapshot of U.S. economic health, while Friday's NFP report could sway expectations for Fed policy. Strong data could bolster the USD, while weaker prints might fuel rate-cut speculation. Central Bank Decisions. The Fed, BoC, and BoJ will announce their interest rate decisions, with markets expecting all three to hold steady. However, forward guidance will be critical, especially from the Fed, as traders parse comments on tariffs and inflation. Jerome Powell's press conference will be scrutinised for any shifts in monetary policy outlook, especially given the external pressures he is facing from the White House. The Fed, BoC, and BoJ will announce their interest rate decisions, with markets expecting all three to hold steady. However, forward guidance will be critical, especially from the Fed, as traders parse comments on tariffs and inflation. Jerome Powell's press conference will be scrutinised for any shifts in monetary policy outlook, especially given the external pressures he is facing from the White House. Inflation Reports. Australia, Germany, and the Eurozone will release Consumer Price Index (CPI) data, which could influence expectations for monetary policy in those regions. The U.S. Personal Consumption Expenditure (PCE) Price Index, the Fed's preferred inflation gauge, will also be closely watched. Here it will be important to see if record-high inflation expectations (due to rising tariffs) are feeding into the actual CPI figures. Australia, Germany, and the Eurozone will release Consumer Price Index (CPI) data, which could influence expectations for monetary policy in those regions. The U.S. Personal Consumption Expenditure (PCE) Price Index, the Fed's preferred inflation gauge, will also be closely watched. Here it will be important to see if record-high inflation expectations (due to rising tariffs) are feeding into the actual CPI figures. China PMI. The NBS Manufacturing and Services PMI will offer insights into China's economic recovery, a key driver for commodity currencies like AUD and NZD. How to trade this week: risk management is key Weeks like these demand a disciplined approach to trading. Volatility can create opportunities, but it also heightens the risk of significant losses. Here's how Forex traders can navigate this historic week: Stick to what you know. Focus on currency pairs you're familiar with. Understanding their historical behaviour and key levels will help you make informed decisions amid the chaos. Focus on currency pairs you're familiar with. Understanding their historical behaviour and key levels will help you make informed decisions amid the chaos. Set stop-losses religiously. Volatility spikes can lead to rapid price swings. Always use stop-loss orders to cap potential losses, and consider tightening them during major releases like NFP or central bank announcements. Volatility spikes can lead to rapid price swings. Always use stop-loss orders to cap potential losses, and consider tightening them during major releases like NFP or central bank announcements. Limit exposure. Avoid over-leveraging your positions. With so many events, a single unexpected headline could trigger a cascade of stop-outs. Keep position sizes modest to weather potential storms. Avoid over-leveraging your positions. With so many events, a single unexpected headline could trigger a cascade of stop-outs. Keep position sizes modest to weather potential storms. Stay informed, but don't chase noise. Follow reliable news sources and economic calendars, but avoid reacting impulsively to every headline. Use tools like Octa's trading platform, which boasts a proprietary feed of curated expert insights, to stay updated with real-time market data. Follow reliable news sources and economic calendars, but avoid reacting impulsively to every headline. Use tools like Octa's trading platform, which boasts a proprietary feed of curated expert insights, to stay updated with real-time market data. Diversify risk. Consider hedging strategies or trading less correlated pairs to spread risk. For example, if you're trading USD pairs, balance exposure with a non-USD pair like EUR/GBP. The most important takeaway? Stay focused and avoid distractions. The flood of data and headlines can be overwhelming, but successful traders stick to their strategies, trade pairs they understand, and use stop-losses to protect their capital. Emotional decisions in a week like this can lead to costly mistakes. This week is shaping up to be a historic one for Forex markets. With a dense lineup of economic releases, central bank decisions, and the ongoing tariff saga, traders face both opportunity and risk. By staying disciplined, managing risk effectively, and keeping a close eye on key events, you can navigate this volatile week with confidence. ___ Disclaimer: This press release does not contain or constitute investment advice or recommendations and does not consider your investment objectives, financial situation, or needs. Any actions taken based on this content are at your sole discretion and risk—Octa does not accept any liability for any resulting losses or consequences. Hashtag: #Octa The issuer is solely responsible for the content of this announcement. Octa Octa is an international CFD broker that has been providing online trading services worldwide since 2011. It offers commission-free access to financial markets and various services used by clients from 180 countries who have opened more than 52 million trading accounts. To help its clients reach their investment goals, Octa offers free educational webinars, articles, and analytical tools. The company is involved in a comprehensive network of charitable and humanitarian initiatives, including improving educational infrastructure and funding short-notice relief projects to support local communities. In Southeast Asia, Octa received the 'Best Trading Platform Malaysia 2024' and the 'Most Reliable Broker Asia 2023' awards from Brands and Business Magazine and International Global Forex Awards, respectively.
Zawya
14 hours ago
- Zawya
Kaspersky reveals SharePoint ToolShell vulnerabilities stem from incomplete 2020 fix
Kaspersky's Global Research and Analysis Team (GReAT) discovered that the recently exploited ToolShell vulnerabilities in Microsoft SharePoint originate from an incomplete fix for CVE-2020-1147, first reported in 2020. The SharePoint vulnerabilities have emerged as a major cybersecurity threat this year amid active exploitation. Kaspersky Security Network showed exploitation attempts worldwide, including in Egypt, Jordan, Russia, Vietnam and Zambia. The attacks target organizations across government, finance, manufacturing, forestry and agriculture sectors. Kaspersky solutions proactively detected and blocked ToolShell attacks before the vulnerabilities were publicly disclosed. Kaspersky GReAT researchers analyzed the published ToolShell exploit and found it alarmingly similar to the 2020 CVE-2020-1147 exploit. This suggests that the CVE-2025-53770 patch is, in fact, an effective fix for the vulnerability that CVE-2020-1147 attempted to address five years ago. The connection to CVE-2020-1147 became evident following the discovery of CVE-2025-49704 and CVE-2025-49706, patched on July 8. However, these fixes could be bypassed by adding a single forward slash to the exploit payload. Once Microsoft learned of active exploitation of these vulnerabilities, they responded with comprehensive patches that addressed potential bypass methods, designating the vulnerabilities as CVE-2025-53770 and CVE-2025-53771. The surge in attacks against SharePoint servers worldwide occurred during the window between initial exploitation and full patch deployment. Despite patches now being available for the ToolShell vulnerabilities, Kaspersky expects attackers will continue exploiting this chain for years to come. "Many high-profile vulnerabilities remain actively exploited years after discovery — ProxyLogon, PrintNightmare and EternalBlue still compromise unpatched systems today. We expect ToolShell to follow the same pattern: its ease of exploitation means the public exploit will soon appear in popular penetration testing tools, ensuring prolonged use by attackers," said Boris Larin, principal security researcher at Kaspersky GReAT. To stay safe, Kaspersky recommends: Organizations using Microsoft SharePoint must apply the latest security patches immediately. This applies to all high-risk vulnerabilities, as even brief exposure can lead to compromise. Deploy cybersecurity solutions that protect against zero-day exploits when patches aren't yet available. Kaspersky Next, with its Behavior Detection component, proactively blocks exploitation of such vulnerabilities. Read the full report on About Kaspersky Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky's deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect individuals, businesses, critical infrastructure, and governments around the globe. The company's comprehensive security portfolio includes leading digital life protection for personal devices, specialized security products and services for companies, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help millions of individuals and over 200,000 corporate clients protect what matters most to them. Learn more at
