Global Microsoft Server Breach Sparks Security Concerns

A global attack has breached Microsoft server software used by thousands of government agencies and businesses, likely by a single cyber actor. While Microsoft has issued security updates, international agencies may have already been compromised, prompting investigatory efforts from bodies like the FBI.

A vast cyberattack targeting Microsoft's server software, integral to document sharing among government agencies and businesses worldwide, is believed to be orchestrated by a single entity, according to a cybersecurity expert on Monday.

Over the weekend, Microsoft alerted users about 'active attacks' on SharePoint servers within organizations, noting that the cloud-based SharePoint Online in Microsoft 365 remained unaffected by the previously unknown 'zero day' exploit. Rafe Pilling from Sophos stated that the attacks' consistent tradecraft hints at a lone actor, though this scenario may evolve swiftly.

The FBI is informed and collaborating with federal and private-sector partners, while Britain's National Cyber Security Centre remains silent. Reports indicate unidentified entities recently exploited a system flaw to strike U.S. and global agencies, potentially compromising more than 8,000 servers, including those of industrial, financial, and governmental sectors.

(With inputs from agencies.)