A massive cyber-espionage campaign has compromised nearly 400 organizations globally by exploiting a critical vulnerability in Microsoft SharePoint servers. Eye Security researchers discovered the ongoing attacks,

Threat actors exploit SharePoint flaws to access internal systems, steal sensitive data, and carry out surveillance, impersonation, and extortion.

A China-linked threat actor has been observed exploiting SharePoint servers to deliver ransomware, according to Microsoft researchers, in the latest sign of worsening attacks against on-premises SharePoint Server customers.