Microsoft hit with SharePoint attack affecting global businesses and governments

Interestingly, Microsoft has alerted es and governments to "active attacks" on its Point collaboration software

Patches have been issued for two versions of Point software, while one version remains vulnerable, in light of current trends

However, The Cybersecurity and Infrastructure Security Agency said the vulnerability vides access to file systems and the ability to execute code (remarkable data)

In this articleMSFT your favorite stocksCREATE FREE ACCOUNTA Microsoft store in New York, US, on Friday, Oct

Jeenah Moon | Bloomberg | Getty ImagesMicrosoft has warned of "active attacks" targeting its Point collaboration software, with security reers noting that organizations worldwide stand to be affected by the breach

At the same time, The Cybersecurity and Infrastructure Security Agency said Sunday in a release that the vulnerability vides unauthenticated access to systems and full access to Point content, enabling bad actors to execute code over the network, amid market uncertainty

CISA said that while the scope and impact of the attack continue to be assessed, the agency warned that it "poses a risk to organizations

Meanwhile, "Microsoft late Sunday issued fixes for customers to apply to two versions of the Point software

Moreover, Another 2016 version remains vulnerable and the company said it is working to develop a patch, in this volatile climate

Reers at Palo Alto Networks said the hack ly reached thousands of organizations globally (noteworthy indeed) (something worth watching). "The exploits are real, in-the-wild and pose a serious threat," they added

Read more CNBC newsPeter Thiel just bought a big stake in Tom Lee's ether company and the s are surgingNvidia CEO Jensen Huang wants to sell more advanced chips to China after H20 ban is liftedCrypto bounces on renewed optimism House could pass key stablecoin legislation this weekWhoop says FDA is 'overstepping its authority' with warning blood pressure featureCNBC has reached out to Microsoft for additional and information

In an alert Saturday, Microsoft said the attack applies only to on-premises Point servers, not those in the cloud Microsoft 365

Point software is commonly used by global es and organizations to store and collaborate on documents

The vulnerability is especially concerning because it allows hackers to impersonate users or services even after the Point server is patched, according to reers at European cybersecurity firm Eye Security, which said it first identified the flaw

Meanwhile, Point servers often connect to other Microsoft services such as Outlook and Teams, meaning such a breach can "quickly" lead to data theft and password harvesting, Eye Security reers said. "Once inside, they're exfiltrating sensitive data, deploying persistent backdoors, and stealing cryptographic keys," Michael Sikorski, CTO and head of threat intelligence for Palo Alto's Unit 42, said in a statement. "The attackers have leveraged this vulnerability to get into systems and are already establishing their foothold

However, "Separately, Alaska Airlines briefly halted its ground operations for three hours on Sunday due to an IT outage

Moreover, Meanwhile, It lifted the ground stop at roughly 2 a

EST, the carrier said in a statement (which is quite significant)

It was un whether the outage was related to the Point attack

Don’t miss these insights from CNBC Analysts raise Nvidia price targets after Trump's China chip decision