A massive cyber-espionage campaign has compromised nearly 400 organizations globally by exploiting a critical vulnerability in Microsoft SharePoint servers. Eye Security researchers discovered the ongoing attacks,

The Shadowserver Foundation confirmed the 100 figure. It said most of those affected were in the United States and Germany, and the victims included government organizations. Another researcher said that, so far, the spying appeared to be the work of a single hacker or set of hackers.

A global cyberattack exploiting a zero-day flaw in Microsoft SharePoint servers has compromised thousands of organizations, prompting urgent security updates and coordinated federal response.