HackAlert

The world is facing another major cyberattack—this time targeting the very core of governmental institutions. Hackers have exploited an unpatched vulnerability in Microsoft’s widely used SharePoint Server software, compromising dozens of organizations worldwide, from U.S. federal agencies to telecom networks across Asia.
Unlike Microsoft’s cloud-based services like Microsoft 365, the issue lies within local SharePoint servers—internal systems used for storing and sharing documents. These servers became the prime targets.

Zero-Day Flaw Left Thousands of Systems Unprotected
This is a "zero-day" vulnerability—an undisclosed flaw with no available patch. According to security experts, thousands of institutions were left exposed with no defenses in place.
Early investigations show that attackers infiltrated systems of over 50 organizations, including European government agencies, a major energy provider in the U.S., and a university in Brazil. In one Eastern U.S. state, hackers blocked access to a batch of public documents, making it impossible for the government to delete or retrieve them.

No Patch from Microsoft Yet — Organizations Forced to Improvise
Despite the severity of the breach, Microsoft has yet to release an official patch. Affected institutions have had to resort to temporary fixes—such as server reconfigurations or disconnecting them from the internet—to reduce risk.
While Microsoft confirmed the breach and issued a security advisory, the company has remained publicly silent. It recommended users quarantine vulnerable servers and take them offline if necessary.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with counterparts in Canada and Australia, has launched an investigation. The Center for Internet Security (CIS), which works with local U.S. governments, identified nearly 100 at-risk organizations, including public schools and universities.
The situation is further complicated by recent budget cuts, which led to the termination of 60% of the personnel handling threat response. According to CIS Vice President Randy Rose, it took six hours on Saturday night to process the first incident alert. "If we hadn’t lost so many team members, it would’ve been much faster," he added.

Microsoft Faces Growing Scrutiny
This isn’t the first time Microsoft has faced doubts about its ability to protect customers. The Department of Homeland Security noted that the attackers may have built on an earlier SharePoint vulnerability that Microsoft had only partially addressed.
Experts warn of long-term consequences. Once attackers gain access to SharePoint servers, they can move laterally into systems like Outlook, Microsoft Teams, and internal databases. Some reportedly stole cryptographic keys that could enable future access—even after a patch is applied.
One anonymous researcher involved in the federal investigation warned, “Even if Microsoft releases a fix on Monday or Tuesday, it won’t help those already breached in the past 72 hours.”

Past Criticism Comes Back into Focus
Last year, a government-appointed panel criticized Microsoft’s handling of a targeted Chinese cyberattack on U.S. federal email systems—including communications by then-Commerce Secretary Gina Raimondo. In that case, hackers abused Microsoft’s cloud platform to access sensitive government emails.
The situation escalated further after a ProPublica report revealed that Microsoft had hired engineers in China to work on cloud systems tied to the U.S. military. In response, Microsoft announced on Friday that it would no longer employ Chinese workers on Pentagon-related projects.

Long-Term Fallout Likely
Governments, cybersecurity agencies, and corporations worldwide are now questioning whether Microsoft can still be trusted as a critical tech provider when it repeatedly fails to address major vulnerabilities in time.
While attackers gain access to sensitive data, the world is waiting for Microsoft to deliver a real solution—and wondering what the consequences will be for those already affected.

#cyberattack , #CyberSecurity , #HackAlert , #Microsoft , #hacking

Stay one step ahead – follow our profile and stay informed about everything important in the world of cryptocurrencies!
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“

The Sui blockchain ecosystem is facing turbulence after Cetus Protocol, a major liquidity provider, suffered a $223 million exploit! 😱 As a result, Haedal Protocol, a popular liquid staking platform, has temporarily suspended its haeVault feature, which relies on Cetus’ liquidity pools.

🛑 What Happened?

Cetus Protocol, a key player in Sui’s DeFi ecosystem, was drained of $223M in a massive exploit.

Haedal Protocol quickly disabled haeVault to protect users, assuring that all other features remain safe and operational.

The CETUS token plunged 30%, while SUI dropped ~5% amid the chaos. 📉

💰 Cetus Offers $6M Bounty to Hacker

In a dramatic twist, Cetus has proposed a deal to the attacker:
✔ Return 20,920 ETH (~$55.7M) + frozen Sui assets
✔ Keep $6M as a bounty
✔ No legal action

But the offer is time-sensitive—if the hacker moves funds through mixers, the deal’s off the table! ⏳

🔍 What’s Next for Sui & Haedal?

Haedal will reactivate haeVault once security is confirmed.

SUI’s price is struggling, down ~28% from its ATH ($5.35 in Jan 2025).

Investors are watching closely—will the hacker take the deal? Will Sui recover?

💡 Key Takeaways

✅ DeFi exploits remain a major risk—always DYOR!
✅ Liquidity pool dependencies can create chain reactions (Haedal’s pause shows this).
✅ Bounties are becoming a common negotiation tool post-hack.

Stay tuned for updates! Follow us for the latest in crypto news & security alerts. 🔔$SOL
$BNB
#Sui #Cetus #Haedal #DeFi #CryptoNewss #Binance ##HackAlert

One of Byb!t’s cold wallets was hacked by hacker and the hacker stole $1.4B in $ETH . CEO of Byb!t, Ben Zhou, assures that the other wallets are secure.

⚡️Byb!t CEO: We are solvent. Even if the losses from the hack are not recovered, all customer assets are fully backed 1:1, and we will be able to cover the losses. (twitter)

UPDATE
⛔️ North Korean Link in the Byb!t Hack
DeFiLlama founder 0xngmi pointed out that the attack on Byb!t closely resembles the hack of the Indian exchange Waz!rX.
That incident was linked to North Korean hackers.
#BybitHack #HackAlert #CryptoNews