Microsoft releases urgent fix for Sharepoint vulnerability being used in global cyberattacks
The company issued an alert to customers Saturday saying it was aware of the zero-day exploit — where hackers take advantage of a previously unknown vulnerability — being used to conduct attacks and that it was working to patch the issue. Microsoft updated its guidance Sunday with instructions to fix the problem for SharePoint Server 2019 and SharePoint Server Subscription Edition. Engineers were still working on a fix for the older SharePoint Server 2016 software.
Cyber criminals often use zero-day exploits to steal sensitive data and passwords. The vulnerability also could allow hackers to access services connected to SharePoint, including OneDrive and Teams.
The company said in its blog post that it discovered at least dozens of systems were compromised around the world. Security engineers stated the attacks occurred in waves on July 18 and 19.
Although the scope of the attack is still being assessed, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that the impact could be widespread and recommended that any servers impacted by the exploit should be disconnected from the internet until they are patched.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
37 minutes ago
- Yahoo
Wedbush Calls AI Microsoft's Shining Moment
Microsoft (NASDAQ:MSFT) executive aren't losing any sleep over Q4, with Wedbush just stuck with its Outperform call and $600 target ahead of the July 30 report. Warning! GuruFocus has detected 7 Warning Sign with MSFT. Daniel Ives and the team reckon the AI revolution is in full swing, with enterprise deals accelerating across finance, government and retail. They see Azure and Office AI features driving Microsoft toward a $4 trillion market capand even $5 trillion in the next 18 months. Over the next three years, more than 70% of its installed base should be running AI tools, and early Copilot rollouts could tack on about $25 billion by FY 26. Wedbush calls this Redmond's shining moment, pointing out stronger cloud wins against Amazon (AMZN) and Google (NASDAQ:GOOG) and smoother supply chains compared to 90 days ago. They're clear that while FY 25 looks solid, FY 26 is when AI really kicks inand they don't think the Street has fully caught on yet. Investors will be watching the July 30 print for proof. This article first appeared on GuruFocus.
Yahoo
an hour ago
- Yahoo
Microsoft Patent Automates Cloud Error Fixes
Microsoft wants to keep things running smoothly in the cloud. The company is seeking to patent a system for 'automated incident triage' in cloud computing environments using generative AI to automatically track, route and handle any errors. READ ALSO: What Businesses Should Consider Before Using Off-the-Shelf AI and How to Avoid Hiring a North Korean Spy as a 'Remote Employee' 'Conventional approaches leverage general machine learning models to aid in triage and diagnosis,' the patent notes. 'However, the performance of these approaches is limited due to a lack of domain knowledge in general machine learning models from various triage teams.' Cloud 'incidents' come in many forms that can undermine the health, performance and security of a cloud system, including bugs, outages, service errors and vulnerabilities. When an incident is detected, a triage engine will sort it into the right category to troubleshoot it properly. Each potential category has its own dedicated generative AI model trained on past data to properly handle such incidents. The models digest information related to the incident and make recommendations on which team should tackle it. Cybersecurity has long been Microsoft's bread and butter. The company's patent history includes tech to weed out anomalies in cloud environments, prevent AI 'jailbreaks' and evaluate data health. It's only natural that security extends to Azure, which has become one of the company's biggest moneymakers as AI drives up demand. In the most recent quarter, the company's cloud unit made $42.4 billion, up 20% from the previous year's quarter. Azure holds 22% of global cloud market share, according to CRN, second only to Amazon Web Services. But its security oversight extends only so far: Earlier this month, hackers exploited a vulnerability in Microsoft's SharePoint document management software, creating a breach impacting organizations worldwide. Microsoft said that hackers are targeting clients running SharePoint services from on-premise networks rather than services hosted by the company itself. That underscores the stakes for enterprises weighing whether to repatriate their data and systems to on-premise servers, rather than storing them with cloud hyperscalers: The relative security capabilities of each option should be evaluated carefully. This post first appeared on The Daily Upside. To receive cutting-edge insights into technology trends impacting CIOs and IT leaders, subscribe to our free CIO Upside newsletter.
Yahoo
an hour ago
- Yahoo
Why Hexcel (HXL) Shares Are Falling Today
What Happened? Shares of aerospace and defense company Hexcel (NYSE:HXL) fell 3.2% in the afternoon session after the company reported second-quarter 2025 financial results that showed year-over-year declines in revenue and profit. The aerospace materials supplier's sales fell 2.1% to $490 million compared to the prior-year quarter. Adjusted earnings per share also decreased to $0.50 from $0.60. The company's profitability took a hit as gross margins contracted to 22.8% from 25.3%, which Hexcel attributed to lower production and inventory reduction efforts. Furthermore, operating income plunged by 58.2%, impacted by a $24.2 million restructuring charge related to a facility closure. Despite the yearly declines, both revenue and adjusted earnings per share did manage to beat Wall Street expectations for the quarter. The company also maintained its full-year guidance. The stock market overreacts to news, and big price drops can present good opportunities to buy high-quality stocks. Is now the time to buy Hexcel? Access our full analysis report here, it's free. What Is The Market Telling Us Hexcel's shares are not very volatile and have only had 3 moves greater than 5% over the last year. In that context, today's move indicates the market considers this news meaningful, although it might not be something that would fundamentally change its perception of the business. The biggest move we wrote about over the last year was 3 months ago when the stock dropped 9.9% on the news that the company reported weak first quarter 2025 results. Its revenue, EPS, and EBITDA missed analysts' estimates. Hexcel also cut its full-year revenue and profit forecasts in response to continued supply chain delays. A key concern was the commercial aerospace sales which dropped over 6%, hit hard by slower production on jets like the 787 and A350. That dragged overall sales down 3%, and profits dropped too, with lower volumes making it harder to cover fixed costs. Defense and space did okay, up almost 3%, but that just wasn't enough to balance out the hit in commercial. Overall, this quarter could have been better. Hexcel is down 1.5% since the beginning of the year, and at $60.85 per share, it is trading 13.9% below its 52-week high of $70.69 from January 2025. Investors who bought $1,000 worth of Hexcel's shares 5 years ago would now be looking at an investment worth $1,363. Today's young investors likely haven't read the timeless lessons in Gorilla Game: Picking Winners In High Technology because it was written more than 20 years ago when Microsoft and Apple were first establishing their supremacy. But if we apply the same principles, then enterprise software stocks leveraging their own generative AI capabilities may well be the Gorillas of the future. So, in that spirit, we are excited to present our Special Free Report on a profitable, fast-growing enterprise software stock that is already riding the automation wave and looking to catch the generative AI next. Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
