Microsoft just sent out an urgent warning: hackers are attacking important server software used by businesses and government offices to share and store documents. These attacks are already happening — and they’re serious.
This isn’t a warning about what might happen — it’s already happening now.
What’s Under Attack?
The target is a tool called SharePoint, which is used by companies and government groups to share files and work together online.
Microsoft said this attack only affects SharePoint servers that are installed on-site — like in office buildings or government offices. Luckily, if your SharePoint is on Microsoft 365 online (the cloud), you’re safe for now.
Who’s Behind It?
We don’t know exactly who the hackers are. But according to the Washington Post, the attackers are targeting U.S. and international agencies, and probably private companies too. This type of hack is called a “zero-day” attack — which means no one knew about the security flaw before, not even Microsoft. That gave the hackers a head start.
Experts say that tens of thousands of servers around the world could be at risk.
What Can the Hackers Do?
Microsoft explained that the attack lets a hacker do something called “spoofing”. That means the hacker can pretend to be someone else — like a trusted employee or official — to sneak into systems or trick people.
This kind of trick can be used to steal sensitive information, manipulate data, or send fake messages from what appears to be a safe source.
Think of it like a robber wearing a disguise to look like a police officer so they can get inside a locked building.
What’s Being Done Now?
-
Microsoft has already released a security update for the SharePoint Subscription Edition, which it says MUST be installed immediately to stay protected.
-
If you’re using SharePoint 2016 or 2019, Microsoft says updates are coming soon, but for now, businesses should disconnect those servers from the internet if they can’t use special malware protections.
-
The FBI also confirmed it’s aware of the attacks and is working with other agencies and private companies to track the situation. But they didn’t give more details yet.
Why This Matters
This isn’t just a computer problem — it’s a national security threat. Government offices and big companies keep important and private data on these servers. If hackers break in, they could steal documents, cause chaos, or even hurt the economy.
Bottom Line:
-
Hackers have already launched an attack
-
Microsoft says fix your SharePoint servers now
-
If you can’t fix them, disconnect them
-
Even the FBI is watching closely
This is a race between tech heroes and cyber villains — and the next few days will be critical.