A major cyber espionage campaign has compromised approximately 100 organizations by targeting Microsoft’s self-hosted SharePoint servers, researchers reported. The attacks are currently active, with Microsoft warning that these servers, used for internal collaboration and file sharing, are at risk. Cloud-based SharePoint services remain unaffected.
"We are monitoring the situation closely and recommend organizations take immediate action to secure their servers," Microsoft stated in a recent advisory.