Press "Enter" to skip to content

Microsoft has put the previous versions of SharePoint on vital support. Hackers are taking advantage of

Hundreds of organizations All over the world it has undergone violations of the data this week, since a series of hackers rushed to exploit a recently discovered vulnerability in the previous versions of the Microsoft file sharing tool known as SharePoint. The violation string is added to an already urgent and complex dynamic: the institutions that are long -standing SharePoint users can face an increase in risk by continuing to use the service, just as Microsoft is emptying support for a platform in favor of new cloud offers.

WhatsApp Group Join Now
Telegram Group Join Now

Microsoft he said Tuesday who, in addition to other actors, has seen multiple hacking groups connected to China that exploit the defect, which is specifically present in the previous versions of SharePoint that are hosted by self -propections by the organizations. It does not have an impact on the latest version of SharePoint based on cloud that Microsoft has encouraged customers to adopt for many years. Bloomberg first shown On Wednesday that one of the victims is the United States National Nucurity Administration, which supervises and maintains US nuclear weapons.

The “local” or self -managed share -shaped server are a popular goal for hackers, because organizations often create them in such a way as to be exposed on the open internet and then forget them or do not want to allocate the budget to replace them. Even if corrections are available, the owner can neglect to apply them. This is not the case, however, with the bug that triggered the wave of attacks this week. While referring to a previous vulnerability of SharePoint discovered at the Hacking Pwn2OWN competition in Berlin in May, the patch that Microsoft released at the beginning of this month was herself imperfectIt means that even the organizations that have made their diligence of security have been captured. Microsoft climbed this week to release a solution for correction, or what the company called “more robust protections” in its Security notice.

“In Microsoft, our commitment, anchored in the future initiative secure, is to meet customers where they are located,” said a Microsoft spokesman in a statement via E -mail. “This means supporting organizations throughout the cloud adoption spectrum, including those who manage local systems.”

Microsoft still supports the versions of Sharepoint Server 2016 and 2019 with security updates and other corrections, but Both will reach What Microsoft calls “end of the support” on July 14, 2026. Sharepoint server 2013 and first have already reached the end of life and receives only the most critical security updates through a paid service called “SharePoint Server Server Edition”. Consequently, all the versions of Sharepoint Server are increasingly part of a digital backwater in which the convenience of continuing to perform the software has a significant risk and a potential exposure for users, in particular when the SharePoint servers sit on the internet.

“Years ago, Microsoft has positioned SharePoint as a safer replacement for the tools for sharing the Windows files of the old school, so that it is why organizations such as government agencies invested in the creation of those servers. And now they run at additional costs, compared to a Microsoft365 subscription in the cloud that involves a cloud involving the cloud involving research that involves search for research. And the development of the research. But if you are exposing an internet SharePoint server, I would emphasize that you also have to budget for response to accidents, because that server will eventually be put to get out of me. “

Source link


Discover more from Gautam Kalal

Subscribe to get the latest posts sent to your email.

More from TechnologyMore posts in Technology »

Be First to Comment

Leave a Reply