Hackers exploited a zero-day vulnerability in Microsoft SharePoint servers, targeting US federal agencies and other entities.

Will Microsoft dock Satya Nadella’s pay again this year? The software giant faced the latest in a seemingly endless string of security breaches over the weekend, when it told customers that hackers were exploiting a flaw in its SharePoint file-sharing software.

Microsoft said in a post on its website on Saturday that it was “aware of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilities.” SharePoint is a Microsoft platform that allows customers to manage and share documents within their organizations.

Unknown attackers exploited a “significant vulnerability” in Microsoft’s SharePoint collaboration software, hitting targets around the world.

Microsoft released security updates for SharePoint Subscription Edition and SharePoint 2019, noting “customers should apply these updates immediately to ensure they’re protected.” The company added that it was developing security updates for supported versions of SharePoint 2019 and SharePoint 2016.

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk.

Microsoft recently revealed that an internal customer support database experienced a security breach last year which may have exposed the data of certain customers. Most customers weren’t ...