NEWS

American nuclear agency struck by cyber attack via the vulnerability of Microsoft SharePoint

NEWYou can now listen to Fox News articles!

A balancing cyber attack violated the National Nuclear Security Administration (NNSA) via the SharePoint document software in Microsoft, the energy department confirmed on Wednesday at Fox News.

The agency knows no sensitive or classified information that has been stolen at the moment.

“Friday, July 18, the exploitation of a vulnerability of Microsoft SharePoint Zéro-Day began to affect the Ministry of Energy, including the NNSA,” a Ministry of Energy (DOE) told Fox News Digital, referring to the agency responsible for maintaining and designing nuclear weapons in the country.

Microsoft puts an end to the use of computer engineers based in China for certain defense department projects in the middle of spy fears

Signals outside the Microsoft campus

Note outside the Microsoft campus in Redmond, Washington, United States, Thursday, March 3, 2022. (Chona Kasinger / Bloomberg via Getty Images)

Microsoft warned that the Chinese actors sponsored by the State exploited defects in the SharePoint software of institutions around the world. Eye-based in the Netherlands said Reuters The violation has now claimed 400 victims.

Typhoon of Lin and Violet Typhoon, the two groups supported by the PCC involved in hacking, have used defects in the document sharing software that exist for customers who perform it on their own networks rather than via Microsoft cloud software.

But Doe said he largely uses the cloud, so only a “very small number of systems have been affected”.

“All the impacted systems are restored.”

Microsoft sharepoint image

SharePoint de Microsoft was hacked by Chinese State -related Chinese actors, said the company. (Getty)

Another hacking group based in China, Storm-2603, also exploited vulnerabilities, according to Microsoft.

Asked about the hack on Wednesday, the spokesman for the Chinese Foreign Ministry, Guo Jiakun, said that he was not aware of the details, but: “China is opposed and fights hacking activities in accordance with the law.

Charles Carmakal, head of technology of the cybersecurity consulting group handling belonging to Google, confirmed on Monday in a LinkedIn article that at least one of the organizations involved in the hack was a “threat actor of China-Xexus”.

National security experts raise concerns after the Microsoft program exposed as a possible avenue for Chinese espionage

The national flag of China takes place on the island of Pingtan, the closest point to China on the main island of Taiwan, in the south-east of the province of Fujian in China on December 11, 2024

“China is opposed and fights hacking activities in accordance with the law. At the same time, we oppose smears and attacks on China under the excuse of cybersecurity issues,” said a spokesperson for the Chinese Foreign Affairs in response to allegations. (Adek Berry / AFP via Getty Images)

On Sunday, the American cybersecurity and infrastructure security agency said it was “aware of active exploitation” of SharePoint vulnerability.

Click here to obtain the Fox News app

Microsoft CEO Satya Nadella promised last year to make cybersecurity an absolute priority after government report criticized the company’s treatment of a Chinese email violation of US government representatives.

Last week, the company promised to stop using engineers based in China to provide technical support to customers of the Ministry of Defense using the company’s cloud services. This came after a propublica report revealed this practice and said that he could expose the DOD to the Chinese pirates.

Related Articles

Back to top button