Live data from Hacker News

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

washingtonpost.com

1–10 of 456 posts

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#1
https://archive.ph/Ym2jZ, https://web.archive.org/web/20250721135933/https://www.washi...

https://research.eye.security/sharepoint-under-siege/

https://krebsonsecurity.com/2025/07/microsoft-fix-targets-at...

https://www.bleepingcomputer.com/news/microsoft/microsoft-re...

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say
washingtonpost.com

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#5

Is it a coincidence that this was reported on the same day it was also reported that the FBI was storing the Epstein files on a Sharepoint server [1]? https://www.muellershewrote.com/p/the-epstein-cover-up-at-th...

I was not sure if this was mere speculation on your part, but I think you might be onto something here.

https://www.muellershewrote.com/p/the-epstein-cover-up-at-th... | https://archive.is/RZqU0

> The process of reviewing the Epstein and Maxwell files was chaotic, and the orders were constantly changing - sometimes daily. One person I spoke to on the condition of anonymity said that many agents spent more time waiting for new instructions than they did processing files. But here’s what caught my attention: the files were stored on a shared drive that anyone in the division could access. Normally, access is only granted to those working on a project, but because of the hurried nature of the exercise, the usual permission restrictions were not in place. Additionally, the internal SharePoint site the bureau ended up using to distribute the files toward the end did not have the usual restricted permissions. This left the Epstein and Maxwell files open to viewing by a much larger group of people than previously thought.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#6

Is it a coincidence that this was reported on the same day it was also reported that the FBI was storing the Epstein files on a Sharepoint server [1]? https://www.muellershewrote.com/p/the-epstein-cover-up-at-th...

I was not sure if this was mere speculation on your part, but I think you might be onto something here. https://www.muellershewrote.com/p/the-epstein-cover-up-at-th... | https://archive.is/RZqU0 > The process of reviewing the Epstein and Maxwell files was chaotic, and the orders were constantly changing - sometimes daily. One person I spoke to on the condition of anonymity said that many agents spent more time waitin…

So how does this work for someone to know what server to use the exploit? Do companies make their Sharepoint servers accessible to WWW? Do hackers need to use this on a network they've already pwnd? Finding out the FBI put something like this on a server open to the WWW would be classic. That much larger group just got a wee bit larger than they previously thought on their previously thought number.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#7
Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux.

Probably not since there are so many of these breaches people just ignore them.

I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#8
post #7

Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux. Probably not since there are so many of these breaches people just ignore them. I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

Genuinely asking - is there a Linux alternative to Sharepoint? I couldn't care less if it was lit on metaphorical fire and dumped into the sea, but a lot of orgs using it extensively.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#9
post #7

Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux. Probably not since there are so many of these breaches people just ignore them. I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

I operate under the assumption that open source projects are compromised by states. If you espouse unpopular ideas or are yourself a state don’t rely on it.
Post reply on HN