Hackers exploit Microsoft's SharePoint as firm works on patches

MICROSOFT WARNED THAT hackers are actively targeting customers of its document management software SharePoint, with security researchers flagging the risk of potentially widespread breaches around the world.

- MARK ANDERSON & JANE LANHEE LEE

Vulnerabilities in the software have allowed hackers to access file systems and execute code, the US Cybersecurity and Infrastructure Security Agency warned on Sunday. While Microsoft said over the weekend that it had released a new patch for customers to apply to their SharePoint servers "to mitigate active attacks targeting on-premises servers," the company was still working to roll out others to address ongoing security flaws.

Cybersecurity firms cautioned that a broad section of organizations may be affected by the breach. Tens of thousands—if not hundreds of thousands—of businesses and institutions worldwide use SharePoint in some fashion to store and collaborate on documents.