SharePoint Flaws Used to Hack Switzerland’s Federal IT Agency

Attackers compromised approximately 200 accounts on Switzerland's Federal Office for Information Technology and Communications' on-premises SharePoint servers by exploiting vulnerabilities in Microsoft's SharePoint software. The incident occurred after Microsoft reported several vulnerabilities in the software in mid-July, which the attackers likely leveraged to gain unauthorized access. As a result, the affected servers are being rebuilt as investigations into the breach continue. The specific vulnerabilities exploited by the attackers have not been disclosed, but the incident highlights the importance of prompt patching and updates for SharePoint systems. The breach is significant, given the sensitive nature of the data handled by the Federal IT Agency, and serves as a reminder of the risks associated with unpatched software¹. This incident matters to cybersecurity practitioners because it underscores the need for timely vulnerability management and secure configuration of SharePoint deployments to prevent similar attacks.