Microsoft SharePoint servers are under attack
Summary
Demo exploit code for CVE-2019-0604 was published in March by Markus Wulftange, the security researcher who found the vulnerability, but other PoCs also popped up on GitHub and Pastebin . "Its interesting that both the Canadian and Saudi government reported the installation of Chinna Chopper at the start of the intrusions," Chris Doman , a security researcher at AT&Ts Alien Vault Labs , told ZDNet today. Canadian authorities said that "trusted researchers have identified compromised systems belonging to the academic, utility, heavy industry, manufacturing and technology sectors. With active attacks underway, companies running SharePoint servers are advised to bring their systems up to date, to mitigate any threat. If patches cant be applied, organizations are advised to put vulnerable SharePoint servers behind a firewall, accessible on internal networks only.
Classifications
AskAI Classifications
LabelsLinked Companies
