Microsoft Used China-Based Engineers to Maintain Vulnerable SharePoint

Threat Score:
51
Techrepublic
6 days ago

Overview

Microsoft used an engineering team based in China to support SharePoint before its vulnerabilities were patched. The application was exploited by at least three state- Chinese threat groups last month. What is the China connection to the ToolShell SharePoint exploit? An exploit chain for aremote code execution (RCE) attack on on-premises SharePoint serversdubbed ToolShell was first identified at a hacking competition in May; however, Microsoft didn’t put out patches for the vulnerabilities that ...

Related Articles

5 articles
2

Linux-Based Lenovo Webcams’ Flaw Can Be Remotely Exploited for BadUSB Attacks

The Hacker News • 5 hours ago

Cybersecurity researchers have disclosed vulnerabilities in select model webcams from Lenovo that could turn them into BadUSB attack devices. "This allows remote attackers to inject keystrokes covertly and launch attacks independent of the host operating system," Eclypsium researchers Paul Asadoorian, Mickey Shkatov, and Jesse Michaelsaidin a report shared with The Hacker News. The vulnerabilities have been codenamed BadCam by the firmware security company. The findings werepresentedat the DEF C

Score
75
Read more
3

Embargo Ransomware nets $34.2M in crypto since April 2024

Security Affairs • 6 hours ago

Embargo ransomware, likely a BlackCat/Alphv successor, has netted $34.2M in crypto since mid-2024, researchers say. The Embargo ransomware group has processed $34.2M in crypto since emerging in April 2024, researchers from Blockchain intelligence company TRM Labs report. “TRM Labs has identified approximately USD 34.2 million in incoming transaction volume likely associated with the group, with […]

Score
75
Read more
5
Google confirms data breach exposed potential Google Ads customers' info

Google confirms data breach exposed potential Google Ads customers' info

BleepingComputer • 4 hours ago

Google confirms data breach exposed potential Google Ads customers' info Lawrence Abrams August 9, 2025 03:15 PM 0 Google has confirmed that arecently disclosed data breachof one of its Salesforce CRM instances involved the information of potential Google Ads customers. "We're writing to let you know an event that affected a limited set of data in one of Google's corporate Salesforce instances used to communicate with prospective Ads customers," reads a data breach notification shared with Bleep

Score
74
Read more