عربي English Türkçe اردو فارسى
Logo
Latest News
World

Global Hack on Microsoft Hits US State Agencies

The Microsoft logo seen at the Hannover Messe industrial trade fair on March 31, 2025, in Hanover, Germany (Reuters) 
The Microsoft logo seen at the Hannover Messe industrial trade fair on March 31, 2025, in Hanover, Germany (Reuters) 
TT
TT

Global Hack on Microsoft Hits US State Agencies

The Microsoft logo seen at the Hannover Messe industrial trade fair on March 31, 2025, in Hanover, Germany (Reuters) 
The Microsoft logo seen at the Hannover Messe industrial trade fair on March 31, 2025, in Hanover, Germany (Reuters) 

Hackers exploited a major security flaw in widely used Microsoft server software to launch a global attack on government agencies and businesses in the past few days, breaching US federal and state agencies, universities, energy companies and an Asian telecommunications company, according to state officials and private researchers.

Microsoft on Saturday issued an alert about “active attacks” on self-hosted SharePoint servers, which are widely used by organizations to share documents and collaborate within organizations. SharePoint instances run off of Microsoft servers were unaffected.

The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners, but offered no other details.

The “zero-day” attack, so called because it targeted a previously unknown vulnerability, is only the latest cybersecurity embarrassment for Microsoft.

Last year, the company was faulted by a panel of US government and industry experts for lapses that enabled a 2023 targeted Chinese hack of US government emails, including those of then-Commerce Secretary Gina Raimondo.

This most recent attack compromises only those servers housed within an organization — not those in the cloud, such as Microsoft 365, officials said.

After first suggesting that users make modifications to or simply unplug SharePoint server programs from the internet, the company on Sunday evening released a patch for one version of the software.

Two other versions remain vulnerable and Microsoft said it is continuing to work to develop a patch.

Microsoft updated its guidance Sunday with instructions to fix the problem for SharePoint Server 2019 and SharePoint Server Subscription Edition. Engineers were still working on a fix for the older SharePoint Server 2016 software.

“Anybody who’s got a hosted SharePoint server has got a problem,” said Adam Meyers, senior vice president with CrowdStrike, a cybersecurity firm. “It’s a significant vulnerability.”

Pete Renals, a senior manager with Palo Alto Networks’ Unit 42 said, “We are seeing attempts to exploit thousands of SharePoint servers globally before a patch is available. We have identified dozens of compromised organizations spanning both commercial and government sectors.’’

With access to these servers, which often connect to Outlook email, Teams and other core services, a breach can lead to theft of sensitive data as well as password harvesting, Netherlands-based research company Eye Security noted, according to The Washington Post.

What’s also alarming, researchers said, is that the hackers have gained access to keys that may allow them to regain entry even after a system is patched.

“So pushing out a patch on Monday or Tuesday doesn’t help anybody who’s been compromised in the past 72 hours,” said one researcher, who spoke on the condition of anonymity because a federal investigation is ongoing.

It was not immediately clear who is behind the hacking of global reach or what its ultimate goal is.

One private research company found the hackers targeting servers in China as well as a state legislature in the eastern United States. Eye Security said it has tracked more than 50 breaches, including at an energy company in a large state and several European government agencies.

Others that were breached included a government agency in Spain, a local agency in Albuquerque and a university in Brazil, security researchers said.

One state official in the eastern US said the attackers had “hijacked” a repository of documents provided to the public to help residents understand how their government works. The agency involved can no longer access the material, but it wasn’t clear whether it was deleted.

Some security companies said they had not seen deletions in the SharePoint attacks, only the theft of cryptographic keys that would allow the hackers to reenter the servers.

CISA spokesperson Marci McCarthy said the agency was alerted to the issue Friday by a cyber research firm and immediately contacted Microsoft.

Microsoft has been faulted in the past for issuing fixes that are too narrowly designed and leave similar avenues open to attack.

 

Most Viewed

 
 
World

Eight Dead in Mass Shooting in Rural West Türkiye

People stroll at Konak Square in the western of Izmir, Türkiye, October 18, 2026. REUTERS/Ali Dinc
People stroll at Konak Square in the western of Izmir, Türkiye, October 18, 2026. REUTERS/Ali Dinc
TT
TT

Eight Dead in Mass Shooting in Rural West Türkiye

People stroll at Konak Square in the western of Izmir, Türkiye, October 18, 2026. REUTERS/Ali Dinc
People stroll at Konak Square in the western of Izmir, Türkiye, October 18, 2026. REUTERS/Ali Dinc

Eight people were shot dead in three villages in western central Türkiye on Thursday, local officials said, as a major manhunt was underway to find the gunman.

"Unfortunately, eight of our citizens have lost their lives, and one has been seriously injured in armed attacks in our province," the Afyonkarahisar governor's office said.

The incident occurred in the early evening in a rural area near Afyonkarahisar, a town half way between the capital Ankara and the coastal city of Izmir, AFP reported.

Two women with gunshot wounds were found on a road in Yukaritandir village, but despite being rushed to hospital, both died, Anadolu state news agency said.

Three more bodies were found in Kiyir village, which lies a half-hour drive to the northeast, and another three in Ayazini village, a further half-hour drive further east, it said.

Another person found in a critical condition was fighting for their life in hospital, it said, without saying where they had been injured.

NTV private television said police were chasing a suspect driving a red car who was seen fleeing the scene.

World

More Than a Dozen Flights in Europe Receive Bomb Threats that an Official Calls 'Malicious' Hoaxes

This video grab from AFPTV footage shows a Finnair plane taking off from Fiumicino Airport after it was diverted due to a bomb threat, with Italian air force jets having escorted it from Helsinki to Rome on November 5, 2026. (Photo by Andrea BERNARDI / AFP)
This video grab from AFPTV footage shows a Finnair plane taking off from Fiumicino Airport after it was diverted due to a bomb threat, with Italian air force jets having escorted it from Helsinki to Rome on November 5, 2026. (Photo by Andrea BERNARDI / AFP)
TT
TT

More Than a Dozen Flights in Europe Receive Bomb Threats that an Official Calls 'Malicious' Hoaxes

This video grab from AFPTV footage shows a Finnair plane taking off from Fiumicino Airport after it was diverted due to a bomb threat, with Italian air force jets having escorted it from Helsinki to Rome on November 5, 2026. (Photo by Andrea BERNARDI / AFP)
This video grab from AFPTV footage shows a Finnair plane taking off from Fiumicino Airport after it was diverted due to a bomb threat, with Italian air force jets having escorted it from Helsinki to Rome on November 5, 2026. (Photo by Andrea BERNARDI / AFP)

Bomb threats targeted more than a dozen flights in Europe on Thursday, leading to a slew of emergency landings and military escorts in some cases, authorities said. No hazardous or suspicious materials have been found in what a British official called “malicious" hoaxes.

Several similar threats targeted planes earlier this week, prompting searches and diversions. Europe has experienced a slew of other disruptions recently, such as attacks on supermarket refrigeration systems, drone incursions and mysterious triggers to alert apps.

While fake bomb threats are relatively common, it is unusual to see so many in a single day. They come at a time of increased geopolitical tensions and warnings from authorities that Russia may be ramping up so-called hybrid threats in Europe.

It was not known whether this week's threats were linked, who sent them or what their aims were.

An email containing the threat to Rome-bound planes was sent on behalf of a group that describes itself as anti-feminist, according to a copy provided by an airport official and reviewed by The Associated Press.

An official from another European airport said the threat they received also came from a group calling itself anti-feminist, and used some of the same language. It wasn't clear if the two threats were sent by the same group. Both officials spoke on condition of anonymity because they weren’t authorized to share the information.

Passengers of Aer Lingus aircraft from Dublin to Rome, leave in a bus the Evreux-Fauville Air Base after their plane had been rerouted and escorted by military aircraft after a suspected bomb threat, on November 5, 2026. (Photo by Guillaume Saligot / AFP)

Jacob Funk Kirkegaard, senior fellow at the Bruegel think tank in Brussels, said the threats were “stress-testing” how European governments and airport officials respond, and whether their responses were coordinated.

The idea behind the threats “appears to be to sow chaos, uncertainty, about the reliability of air traffic across Europe” and could have “cascading effects” — like economic damage and costs related to inspection, investigation and cleaning aircraft.

Joji Waites, who heads flight safety at the British Airline Pilots’ Association, said the industry has put in place “proved mechanisms” for dealing with such threats, including a team of assessors to grade the level of threat in a red-amber-green color-coding system, quick notification of flight crews, and the evacuation of planes on the ground.

Each flight disruption could cost airlines as much as $250,000, on a par with the possible costs of dealing with an unruly passenger, said Philip Baum, a visiting professor of aviation security at Coventry University in England.

“And that’s because you might end up with the crew going out of hours. You might need replacement crew. You have got passengers that miss their flight connections," Baum said. "It knocks everything out of sync for the rest of the day for the airline in question.”

Military escorts incur expenses, too, which would be borne by governments rather than airlines, he added.

Officials decry the hoaxes Britain's transport secretary, Heidi Alexander, told British broadcasters that flights across Europe have been hit by “malicious hoax threats.”

European Union Transport Commissioner Apostolos Tzitzikostas told reporters in Dublin that it was “too early to draw conclusions on whether the reported incidents are linked.”

“National investigations remain ongoing,” he said, adding that an EU information-sharing mechanism on aviation security had been activated.

An Aer Lingus flight from Dublin to Rome was diverted to a military air base in France after receiving a threat, French Prime Minister Sébastien Lecornu’s office said. The flight landed safely at the base in Evreux, which was under high alert, and military bomb disposal teams were examining the plane, the office said.

Lecornu ordered warplanes to intercept the plane because the pilot “didn’t cooperate as expected with the authorities,” his office said. It declined to comment further.

Hours after the flight landed, the plane was sitting on the tarmac with a Red Cross vehicle nearby while explosive experts with dogs examined it.

An investigation was opened by French aviation security authorities. The regional prosecutor, Remi Coutin, said in a statement that the pilot and co-pilot were being questioned about what happened.

Italian air force jets escort a Finnair flight Italian air force fighter jets escorted a Finnair flight that departed Helsinki bound for Rome after an email threat was received, the air force said in a statement.

Finnair said that two of its flights, including the one that received the military escort and landed safely in Rome, “faced unfounded hoax bomb scares.” The other flight, operated by Jettime from Helsinki to Vienna, landed safely at its destination, and was expected to return to service after an inspection, Finnair said.

Three Ryanair flights bound for Sofia, Bulgaria, meanwhile, also received military escorts and made emergency landings after bomb threats, officials said. Two of the flights — one from Copenhagen, Denmark, and the other from Madrid — landed safely in Sofia, airport officials told reporters. The third, from London, was diverted and landed safely in Plovdiv, Bulgaria’s second-largest city, Plovdiv Airport CEO Krassimir Peshev said.

Several flights across Europe received bomb threats earlier this week, officials said.

The flights included ones operated by Polish airline LOT, Scandinavian Airlines, Wizz Air and Ryanair. The hoax threats came after a plane headed for Bulgaria was diverted to Hungary upon receiving a similar bomb threat while in the air. No one was injured.

A Ryanair aircraft at Sofia Airport after airplanes flying from Copenhagen and Madrid landed in Sofia, according to the Bulgarian interior minister, as bomb threats forced airliners to make unplanned landings across Europe, in Sofia, Bulgaria, November 5, 2026. REUTERS/Stoyan Nenov TPX IMAGES OF THE DAY

A slew of other flights were disrupted Thursday. Among those incidents:

— Czech police said searches of four planes that landed in Prague after being targeted by bomb threats turned up nothing. They have not given details on where the flights originated, and said they took precautions despite not finding the threats credible.

— A LOT Polish Airlines flight from Warsaw to Brussels landed at its destination, where inspections found no hazardous or suspicious items, the airline said.

— A Wizz Air flight from Milan to Bucharest landed safely in Bucharest following a bomb threat, airport spokesman Teo Postelnicu said. Checks turned up no bomb.

— A flight to Warsaw landed in Vienna after an email to Polish authorities containing an abstract threat, said Stefan Loidl, a police spokesperson in Lower Austria province. Nothing was found and the plane continued to Warsaw. He said there was also an abstract threat to Vienna Airport concerning four other flights, which he declined to identify, but operations were not disrupted.

- Air Serbia said a flight from Belgrade to Romania’s capital, Bucharest, received a bomb threat that turned out to be a hoax. The plane landed in Bucharest, underwent checks and resumed regular operations.

World

Paraguay President Resigns Following Bank Collapse

FILE PHOTO: Paraguay's President Santiago Peña speaks during an interview with Reuters, in Asuncion, Paraguay August 21, 2024. REUTERS/Cesar Olmedo/File Photo
FILE PHOTO: Paraguay's President Santiago Peña speaks during an interview with Reuters, in Asuncion, Paraguay August 21, 2024. REUTERS/Cesar Olmedo/File Photo
TT
TT

Paraguay President Resigns Following Bank Collapse

FILE PHOTO: Paraguay's President Santiago Peña speaks during an interview with Reuters, in Asuncion, Paraguay August 21, 2024. REUTERS/Cesar Olmedo/File Photo
FILE PHOTO: Paraguay's President Santiago Peña speaks during an interview with Reuters, in Asuncion, Paraguay August 21, 2024. REUTERS/Cesar Olmedo/File Photo

Paraguayan President Santiago Peña resigned on Thursday as calls for his removal swelled following the collapse of digital lender ueno that left millions of customers unable to access their accounts.

"I do so with the stability of our country, social peace, and the need to preserve our democratic institutions in mind," he said in a video recorded address on Thursday.

Peña, an ally of US President Donald Trump, is stepping ⁠down after the opposition ⁠called an extraordinary session to begin the process of filing an impeachment motion in Congress, and as protesters demanded his resignation.

Earlier on Thursday Peña lost backing from members of his own conservative party. Vice President Pedro Alliana is ⁠set to take office as his replacement.

Lawmakers had accused Peña of conflicts of interest, misuse of pension funds and institutional cover-ups linked to the collapse of ueno, which had grown quickly from a niche fintech player into a mid-tier bank administering close to $850 million in public funds.

"My greatest wish is that the return of those funds be guaranteed, that the deposit guarantee fund fulfill its ⁠purpose, and ⁠that public funds - as well as the resources that belong to all Paraguayans - be protected," Peña added in his address.

Paraguay's central bank intervened in ueno after determining that it had breached minimum solvency requirements, setting off a crisis that has left the company's roughly 3 million customers, in a country of 6.5 million people, unable to access accounts.

Ueno has made no public statement on the issue.

Hundreds of employees of Ueno Bank and other companies belonging to Grupo Vázquez, the bank’s parent conglomerate, protested outside the Labor Ministry on Thursday, demanding severance and unpaid wages with their jobs in limbo and their salaries trapped at the failed bank.

A day earlier, hundreds of retirees, depositors, university students and workers flooded the streets of Asunción, the capital.

“We want your head, Peña!” they shouted. Their signs demanded Peña’s impeachment, called him “the enemy of savers” and pleaded “Give us back our money.” Riot police fired pepper spray and rubber pellets to push back the crowds.