Microsoft, SharePoint
Digest more
18hon MSN
Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to exploit flaws in its SharePoint service before they were patched, Bloomberg News reported on Friday.
The Department of Energy, which oversees the agency that manages the US nuclear weapons stockpile, confirms it was affected by the SharePoint bug, but says it was 'minimally impacted.'
New estimates regarding the recently-exploited Microsoft SharePoint vulnerabilities now evaluate that as many as 400 organizations may have been targeted.
Microsoft has released security patches for the zero-day vulnerability chain dubbed ToolShell, capable of remote code execution on SharePoint, resulting in the exploitation of at least 54 organizations worldwide.
2don MSN
Microsoft contained a major SharePoint security flaw, amid fresh questions about the future of its legacy on-premises software.
Explore more
The zero-day vulnerability — which was first disclosed late Saturday — has been exploited by several Chinese state-aligned groups, according to Microsoft.
The name was coined by Dinh Ho Anh, a researcher from Khoa of Viettel Cyber Security, who developed the exploit. The researcher said he picked the name because it exploited ToolPane.aspx, a component for assembling the side panel view in the SharePoint user interface.
12h
NDTV Profit on MSNWeekly Tech Wrap: SharePoint Attack, Realme 15 Pro Launch, Google Pixel 10 Pro Tease, iOS 26 Beta ReleaseThe Moto G86 Power is set to be unveiled on July 30, featuring MediaTek Dimensity 7400 chipset, 6720mAh battery and 5OMP Sony-LYT600 camera. The Vivo T4R, launching July 31, is tipped to be "India's slimmest quad curved display phone" and will pack the MediaTek Dimensity 7400 processor.