Hackers Target Government Using SharePoint Zero-Day Exploit
A SharePoint zero-day exploit is being used to target government systems. Learn how the attack works and what’s at risk.
Matilda
Hackers Target Government Using SharePoint Zero-Day Exploit Government Agencies Targeted by SharePoint Zero-Day Exploit Cybersecurity experts are warning of a SharePoint zero-day exploit actively being used to breach sensitive government systems. The threat emerged after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released a critical alert about the vulnerability. This zero-day—an unpatched security flaw—impacts Microsoft SharePoint servers, putting thousands of systems at risk. Researchers say that attackers began targeting a limited set of high-value government entities, a hallmark tactic of advanced persistent threat (APT) groups. With over 9,000 vulnerable SharePoint servers exposed to the internet, the risk is escalating fast. Image : Google Security researchers from Censys and Eye Security confirmed that the initial wave of attacks appears to be coordinated and highly targeted. According to Silas Cutler, principal researcher at Censys, “Initial exploitation was likely limited to government-related systems.” This aligns …
