微软为被“Toolshell”网络攻击击中的 SharePoint服务器推出安全补丁 窃取敏感数据
Microsoft rushes out security patches for SharePoint servers hit by "ToolShell" cyberattack, stealing sensitive data.
微软公司在广泛利用严重弱点进行网络攻击后,紧急释放了用于在预置的SharePoint服务器的安全补丁。
Microsoft has urgently released security patches for on-premise SharePoint servers after a widespread cyberattack exploiting a critical vulnerability.
这起名为“Toolshell”的袭击影响到多个部门, 包括政府和医疗保健部门, 让黑客获得未经授权的进入权, 并窃取敏感数据。
The attack, dubbed "ToolShell," affected various sectors, including government and healthcare, allowing hackers to gain unauthorized access and steal sensitive data.
尽管 SharePoint Online 仍然不受影响,但微软和美国网络安全和基础设施安全局 (CISA) 建议启用 AMSI 集成和部署 Microsoft Defender 防病毒作为即时缓解措施,直到所有受影响版本的补丁都可用.
Though SharePoint Online remains unaffected, Microsoft and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) advise enabling AMSI integration and deploying Microsoft Defender Antivirus as immediate mitigations until patches are available for all affected versions.