The American nuclear weapons agency was raped using Microsoft SharePoint Hack

The US government agency responsible for designing and maintaining nuclear weapons is one of the people raped by a hack Microsoft SharePoint Server software, Bloomberg reported. However, the attackers could not obtain sensitive or classified information, according to an anonymous source with knowledge of the question.

The violation occurred at the National Nuclear Security Administration, a branch of the energy department responsible for the production and dismantling of nuclear weapons. “Friday, July 18, the exploitation of a vulnerability of Microsoft SharePoint Zéro-Day began to affect the Ministry of Energy,” said a spokesperson Bloomberg. “A very small number of systems have been affected. All the impacted systems are being restored.”

The feat only affects SharePoint for servers on site. The Ministry of Energy said it had been little impact because it largely uses the Microsoft M365 cloud “and very competent cybersecurity systems,” added the spokesperson.

Microsoft blamed the attack by Chinese pirates sponsored by the state. They would have exploited defects in the SharePoint documents management software and could have access and control systems and steal identification information and security tokens. “It is a dream for ransomware operators,” said the Google threat information group, adding that the defect allows “persistent and non -authenticated access which can bypass future fixes”.

The attackers also reached the Department of American Education and the Florida income department, as well as government systems in other countries, including the Middle East and Europe. Microsoft announcement On Monday, he published a new security fix “to mitigate active attacks targeting servers on site (and not online)”.