Microsoft has recently decided to cease using engineering teams based in China for the support of the Defense Department’s cloud computing systems. This decision follows an investigation by ProPublica, which raised concerns among cybersecurity experts about potential vulnerabilities to hacking and espionage. While this action directly addresses the Defense Department,…
Clorox Suffers Major Data Breach Linked to IT Service Provider Negligence In a significant cybersecurity incident, The Clorox Company reported devastating breaches in 2023 that highlight severe vulnerabilities in IT service management. The breach resulted in an estimated financial impact of $380 million, undermining the company’s data integrity and network…
A recent global cyberattack has targeted critical vulnerabilities in Microsoft’s on-premises SharePoint software, affecting multiple U.S. government agencies, including the National Institutes of Health (NIH) and the National Nuclear Security Administration (NNSA). The breaches were first reported around Friday, July 18, prompting swift action from the impacted organizations and a…
Microsoft has recently addressed two critical vulnerabilities, CVE-2025-49706 and CVE-2025-49704, part of their monthly update cycle. However, reports from over the weekend have revealed that the patches were insufficient, leaving organizations vulnerable to new types of cyberattacks. The primary targets of these attacks are organizations using SharePoint servers. The initial…
Numerous organizations globally experienced data breaches this week, following the exploitation of a recently discovered vulnerability in older versions of Microsoft’s SharePoint file-sharing platform. This wave of attacks further complicates the cybersecurity landscape for institutions that have relied on SharePoint, as they face heightened risk while Microsoft shifts its focus…
Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime, Governance & Risk Management Security Researchers Warn of Widespread Access to Exploit Code by Diverse Hacking Groups Mathew J. Schwartz (euroinfosec) • July 22, 2025 Image: Shutterstock/Microsoft Recent assessments indicate that hackers have been exploiting zero-day vulnerabilities in Microsoft SharePoint, primarily to…
The ongoing issues following recent software updates highlight a critical aspect of cybersecurity: infections can enable attackers to steal authentication credentials, granting extensive access to sensitive resources within a compromised network. While installing necessary updates is an initial step in recovery, further actions are imperative for complete remediation. On July…
Governance & Risk Management, Patch Management Microsoft Rolls Out Emergency Patches for Authentication-Bypassing Attacks Prajeet Nair (@prajeetspeaks), Mathew J. Schwartz (euroinfosec) • July 21, 2025 Image: Shutterstock In a concerning development, cybersecurity experts have reported that attackers are exploiting two zero-day vulnerabilities in on-premises Microsoft SharePoint installations. This activity allows…
KT to Invest Over $724 Million in Cybersecurity Following SK Telecom Data Breach In response to heightened consumer concerns following a substantial data breach at SK Telecom, South Korean telecommunications leader KT has announced a commitment to invest more than 1 trillion won (approximately $724 million) over the next five…
