Vulnerability Management, Critical Infrastructure Security, Patch/Configuration Management

Microsoft SharePoint zero-day attacks hit dozens of US state, local governments

SharePoint is a web-based collaborative platform that integrates with Microsoft Office.

Intrusions involving a Microsoft SharePoint vulnerability were noted by the Center for Internet Security to have compromised over 90 state and local governments across the U.S., Reuters reports.

None of the targeted state and local government entities have confirmed being impacted by the attacks, according to CIS Vice President of Security Operations and Intelligence Randy Rose. However, the U.S. Fermi National Accelerator Laboratory in Illinois disclosed the attempted infiltration of its SharePoint servers after being initially reported by Bloomberg. "The attackers were quickly identified, and the impact was minimal, with no sensitive or classified data accessed," said a Fermilab spokesperson. Such a development comes after an Eye Security report detailing that at least 400 organizations have had their vulnerable on-premises SharePoint servers subjected to attacks. Included among the victims are several federal agencies, including the U.S. Department of Energy, which disclosed the compromise of a limited number of its systems as a result of the incident.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds