Microsoft Knew of SharePoint Security Flaw But Failed to Effectively Patch It, Timeline Shows.

Λεπτομέρειες βιβλιογραφικής εγγραφής
Τίτλος: Microsoft Knew of SharePoint Security Flaw But Failed to Effectively Patch It, Timeline Shows.
Συγγραφείς: Pearson, James (AUTHOR)
Πηγή: Claims Journal. 7/23/2025, pN.PAG-N.PAG. 1p.
Θεματικοί όροι: *SharePoint (Computer software), *Computer security vulnerabilities, *Cybercriminals, *Malware, Cyber intelligence (Computer security), Microsoft software
Γεωγραφικοί όροι: China
Εταιρία/Οντότητα: Microsoft Corp. 081466849 MSFT
Περίληψη: The article discusses a critical security flaw in Microsoft's SharePoint server software that was not fully resolved by a recent patch, leading to a global cyber espionage operation targeting approximately 100 organizations. Initially identified at a hacking competition in May, the vulnerability, dubbed "ToolShell," was exploited by multiple hacking groups, including two allegedly linked to China. Despite Microsoft's efforts to address the issue, subsequent malicious activity indicated that the patches were ineffective, leaving thousands of servers potentially compromised, particularly in the U.S. and Germany. The article highlights ongoing concerns regarding cyberattacks attributed to state-linked operatives, with the Chinese government denying involvement. [Extracted from the article]
Copyright of Claims Journal is the property of Wells Media Group and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Βάση Δεδομένων: Business Source Index
FullText Text:
  Availability: 0
Header DbId: bsx
DbLabel: Business Source Index
An: 186887191
RelevancyScore: 1254
AccessLevel: 6
PubType: Periodical
PubTypeId: serialPeriodical
PreciseRelevancyScore: 1254.33068847656
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Microsoft Knew of SharePoint Security Flaw But Failed to Effectively Patch It, Timeline Shows.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Pearson%2C+James%22">Pearson, James</searchLink> (AUTHOR)
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Claims+Journal%22">Claims Journal</searchLink>. 7/23/2025, pN.PAG-N.PAG. 1p.
– Name: Subject
  Label: Subject Terms
  Group: Su
  Data: *<searchLink fieldCode="DE" term="%22SharePoint+%28Computer+software%29%22">SharePoint (Computer software)</searchLink><br />*<searchLink fieldCode="DE" term="%22Computer+security+vulnerabilities%22">Computer security vulnerabilities</searchLink><br />*<searchLink fieldCode="DE" term="%22Cybercriminals%22">Cybercriminals</searchLink><br />*<searchLink fieldCode="DE" term="%22Malware%22">Malware</searchLink><br /><searchLink fieldCode="DE" term="%22Cyber+intelligence+%28Computer+security%29%22">Cyber intelligence (Computer security)</searchLink><br /><searchLink fieldCode="DE" term="%22Microsoft+software%22">Microsoft software</searchLink>
– Name: SubjectGeographic
  Label: Geographic Terms
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22China%22">China</searchLink>
– Name: SubjectCompany
  Label: Company/Entity
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Microsoft+Corp%2E%22">Microsoft Corp.</searchLink> <searchLink fieldCode="DN" term="%22081466849%22">081466849</searchLink> <searchLink fieldCode="TK" term="%22MSFT%22">MSFT</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: The article discusses a critical security flaw in Microsoft's SharePoint server software that was not fully resolved by a recent patch, leading to a global cyber espionage operation targeting approximately 100 organizations. Initially identified at a hacking competition in May, the vulnerability, dubbed "ToolShell," was exploited by multiple hacking groups, including two allegedly linked to China. Despite Microsoft's efforts to address the issue, subsequent malicious activity indicated that the patches were ineffective, leaving thousands of servers potentially compromised, particularly in the U.S. and Germany. The article highlights ongoing concerns regarding cyberattacks attributed to state-linked operatives, with the Chinese government denying involvement. [Extracted from the article]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Claims Journal is the property of Wells Media Group and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=bsx&AN=186887191
RecordInfo BibRecord:
  BibEntity:
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 1
        StartPage: N.PAG
    Subjects:
      – SubjectFull: SharePoint (Computer software)
        Type: general
      – SubjectFull: Computer security vulnerabilities
        Type: general
      – SubjectFull: Cybercriminals
        Type: general
      – SubjectFull: Malware
        Type: general
      – SubjectFull: Cyber intelligence (Computer security)
        Type: general
      – SubjectFull: Microsoft software
        Type: general
      – SubjectFull: China
        Type: general
      – SubjectFull: Microsoft Corp.
        Type: general
    Titles:
      – TitleFull: Microsoft Knew of SharePoint Security Flaw But Failed to Effectively Patch It, Timeline Shows.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Pearson, James
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 23
              M: 07
              Text: 7/23/2025
              Type: published
              Y: 2025
          Titles:
            – TitleFull: Claims Journal
              Type: main
ResultId 1