{"id":13447,"date":"2025-07-21T17:53:09","date_gmt":"2025-07-21T17:53:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/13447\/"},"modified":"2025-07-21T17:53:09","modified_gmt":"2025-07-21T17:53:09","slug":"microsofts-sharepoint-is-being-hacked-by-cyberattackers-fbi-and-cse-warn-national","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/13447\/","title":{"rendered":"Microsoft\u2019s SharePoint is being hacked by cyberattackers, FBI and CSE warn – National"},"content":{"rendered":"

Canada\u2019s cybersecurity agency is issuing an alert over attacks it says are impacting Microsoft<\/a> SharePoint servers, with a warning for organizations to act now to protect their information.<\/p>\n

\"\"<\/p>\n

Microsoft issued an alert on Saturday that said the server software being targeted is used by government agencies and businesses to share documents within their organizations.<\/p>\n

The company advised that security updates should be applied immediately.<\/a><\/p>\n

The Cyber Centre is also urging companies to take various actions to reduce risks<\/a>, including checking for a specific file in their servers.<\/p>\n

\u201cThe Cyber Centre is aware of exploitation happening in Canada,\u201d the Canadian Centre for Cyber Security wrote in a vulnerability alert.<\/p>\n

\t\t\t\t\t\"Get<\/p>\n

\t\t\t\t\tGet daily National news<\/p>\n

Get the day’s top news, political, economic, and current affairs headlines, delivered to your inbox once a day.<\/p>\n

\u201cCVE-2025-53770 involves a deserialization of untrusted data in on-premises Microsoft SharePoint Servers allowing an unauthorised attacker to execute code over a network.\u201d<\/p>\n

Story continues below advertisement<\/p>\n

Those who use SharePoint Online in Microsoft 365, which is in the cloud, have not been impacted.<\/p>\n

Global News has reached out to the federal government and Communications Security Establishment Canada to inquire if any departments have been impacted.<\/p>\n

Vaisha Bernard, the chief hacker at Eye Security, a Netherlands-based cybersecurity firm, which\u00a0discovered the hacking campaign<\/a>\u00a0targeting one of its clients on Friday, said that an internet scan carried out with the Shadowserver Foundation had uncovered nearly 100 victims altogether \u2013 and that was before the technique behind the hack was widely known.<\/p>\n

\n\t\t\tMore on Science and Tech
\n\t\t\tMore videos\n\t\t<\/p>\n

\u201cIt\u2019s unambiguous,\u201d Bernard said. \u201cWho knows what other adversaries have done since to place other\u00a0backdoors.\u201d<\/p>\n

\n\t\tTrending Now\n\t<\/p>\n

\t\t\t<\/p>\n

\t\t\t\t\t\t\"\"\/<\/p>\n

\n\t\t\t\t\tCanadian leaders descend upon Ontario cottage country for high stakes meetings\n\t\t\t<\/p>\n

\t\t\t<\/a><\/p>\n

\t\t\t<\/p>\n

\t\t\t\t\t\t\"\"\/<\/p>\n

\n\t\t\t\t\tMontreal dad facing murder charge after 9-year-old daughter found dead in New York\n\t\t\t<\/p>\n

\t\t\t<\/a><\/p>\n

He declined to identify the affected organizations, saying that the relevant national authorities had been notified.<\/p>\n

The Shadowserver Foundation confirmed the 100 figure and said that most of those affected were in the United States and Germany and that the victims included government organizations.<\/p>\n

The FBI said on Sunday that it was aware of the attacks and is working closely with federal and private-sector partners, but offered no other details.<\/p>\n

The Washington Post, which first reported the hacks, said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted U.S. and international agencies and businesses.<\/p>\n

Story continues below advertisement<\/p>\n

In the alert, Microsoft said a vulnerability \u201callows an authorized attacker to perform spoofing over a network.\u201d It issued recommendations to stop the attackers from exploiting it.<\/p>\n

\u2014 with files from Reuters<\/p>\n

\n\t\t&copy 2025 Global News, a division of Corus Entertainment Inc.\t<\/p>\n","protected":false},"excerpt":{"rendered":"Canada\u2019s cybersecurity agency is issuing an alert over attacks it says are impacting Microsoft SharePoint servers, with a…\n","protected":false},"author":2,"featured_media":13448,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[48,1849,43,63,12460,44,12461,64,41,39,42,40],"class_list":["post-13447","post","type-post","status-publish","format-standard","has-post-thumbnail","category-headlines","tag-canada","tag-consumer","tag-headlines","tag-microsoft","tag-microsoft-hack","tag-news","tag-sharepoint","tag-tech","tag-top-news","tag-top-stories","tag-topnews","tag-topstories"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/13447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=13447"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/13447\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/13448"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=13447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=13447"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=13447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}