Microsoft

Apple MacBooks, Chistmas trees, Lego advent calendars, Fire tablets, and more on sale for Nov. 4 in the UK

Now that we have left spooky season behind, we are officially allowed get excited about Christmas. This is the rule, and we’re going to enforce it. This round up of the best deals is particularly festive, with offers of advent calendars, decorations, and Christmas trees. You can also save on laptops, tablets, printers, robot vacuum…

Published 6 years ago in
Apple MacBooks, Chistmas trees, Lego advent calendars, Fire tablets, and more on sale for Nov. 4 in the UK


Now that we have left spooky season behind, we are officially allowed get excited about Christmas. This is the rule, and we’re going to enforce it.

This round up of the best deals is particularly festive, with offers of advent calendars, decorations, and Christmas trees. You can also save on laptops, tablets, printers, robot vacuum cleaners, and much more, if you’re not yet in the holiday spirit.

These are the best deals from across the internet for Nov. 4.

Best of the best

Save on Lego advent calendars, Philips beard trimmers, Ted Baker fragrances, and a whole lot more.

Uploads%252fcard%252fimage%252f1071916%252f56b4a332 4ce2 4de1 82d7 7244222eac91.jpg%252f640x0.jpg?signature=wv1pdxxnvuyymiyri0vrobv5rzm=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£19.50
£15.49 OFF (44%)£34.99

LEGO Harry Potter Advent Calendar 2019

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071918%252fcd60a28c 1402 44aa 8046 236ae04df0a5.jpg%252f640x0.jpg?signature=br6w4 rwhyqbt1t41xwm7qsyikc=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£19.99
£5 OFF (20%)£24.99

LEGO City Mars Research Shuttle Spaceship

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071920%252f1fdfc821 7fb9 4e38 8c5f 857789e393b2.jpg%252f640x0.jpg?signature=sfj lofldghpfwhfxqtoh0yd0ny=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£35.63
£9.36 OFF (21%)£44.99

LEGO Architecture London Skyline Model

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071922%252faaed3783 ae16 4295 a875 80b473176522.jpg%252f640x0.jpg?signature=bo4xurw85ptxjiliemownt0pm6y=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£15
£5 OFF (25%)£20

Philips Series 3000 7-in-1 Multi Grooming Kit

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071924%252f2e40d738 06d3 4454 97f3 5eaa3d42780e.jpg%252f640x0.jpg?signature=phsfiealtodcduocsoo2no8mrka=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£69.99
£160 OFF (70%)£229.99

Oral-B SmartSeries 6000 CrossAction Electric Toothbrush

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071926%252f8e31447d 3bc4 4fc3 ad59 9a2d517e4db8.jpg%252f640x0.jpg?signature=osrro2tozob54cxen12xpzhsrc0=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£16
£10.50 OFF (40%)£26.50

Paul Smith Extreme Aftershave

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071928%252f61b02c67 f0b3 42ae bb91 ed28a60da980.jpg%252f640x0.jpg?signature=zih255qh3fe44kgjwjyrzlfppre=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£18.67
£31.33 OFF (63%)£50

Davidoff Adventure EDT Spray

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071930%252fde924936 0b14 4aff 9716 62d94dbe0944.jpg%252f640x0.jpg?signature=lwcyg5ptzpyod7htl0 mzem8qay=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£13.34
£18.66 OFF (58%)£32

Ted Baker Eau de Toilette Spray

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071932%252fdb5710e2 2216 4076 b8e6 d82b6f44b276.jpg%252f640x0.jpg?signature=tv0og59si6jv1roj6uyo pgxpim=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£16.19
£33.81 OFF (68%)£50

Joop! Jump Eau de Toilette

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071934%252f57ff1d8f 42a0 48e6 9e39 8920543eeaae.jpg%252f640x0.jpg?signature=x ve854 pgqkuimjnujhys5ev1s=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£33.20
£28.80 OFF (46%)£62

Hugo Boss Bottled Night Eau de Toilette

From AMAZON
See Details

Computers, software, and accessories

All the best deals on antivirus software, laptops, tablets, printers, and much more from brands like Apple, Microsoft, and ASUS.

Uploads%252fcard%252fimage%252f1071936%252f357d7796 811e 492e b3b9 abf49be20094.jpg%252f640x0.jpg?signature=wztubpka lowogml guaid6twk=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£6.99
£28 OFF (80%)£34.99

McAfee Total Protection 2020 (1 Device)

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071938%252fb7b23a55 3c64 49e6 8ce4 d49dc22405d5.jpg%252f640x0.jpg?signature=keasqhzrdiaheqjhkryxtplqnug=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£16.26
£43.73 OFF (73%)£59.99

McAfee Total Protection 2020 (10 Device)

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071940%252fe7e7dcfa d0d7 4666 aabe e12ee4b2f83b.jpg%252f640x0.jpg?signature=hufqqda7fwxaywcej7v76o j4fu=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£199.99
£50 OFF (20%)£249.99

ASUS 14-Inch HD Cloudbook

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071942%252f3699da90 f40a 4517 b68d 9cd04d67cdc2.jpg%252f640x0.jpg?signature=yoonapfwama67tyoqxnnejolyea=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£769
£180 OFF (19%)£949

Apple MacBook Air

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071944%252f3312354b 2c4d 4fb4 a3e2 20d0d5c254f1.png%252f640x0.png?signature=icwi2oblbg6rqwjuudsguv7ouxk=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£1,689
£460 OFF (21%)£2,149

Microsoft Surface Pro 6 12.3-Inch Tablet

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071946%252fa22c7f56 2c69 4c36 98f8 c799b9be6ab7.jpg%252f640x0.jpg?signature=daimvkagudt btwyd3leg20m9ri=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£109.99
£50.00 OFF (31%)£159.99

Fire HD 10 Tablet

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071948%252f1fcade1b ee55 4b3d 926e cf78e32d8119.jpg%252f640x0.jpg?signature=2bqzbpcw51vzn aqtvncag5w6aw=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£189.95
£110.04 OFF (37%)£299.99

Fusion5 Ultra Slim Windows Tablet

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071950%252f5c151132 7d04 442b bd38 d62f3890f061.jpg%252f640x0.jpg?signature=d2pabaojfy621fkkemkjykdvshg=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£69.99
£50 OFF (42%)£119.99

HP Sprocket 200

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071952%252fead212fd 123a 45f1 8829 d61f01c87c28.jpg%252f640x0.jpg?signature=lv09kdw9wxxnlacdvl8986hmces=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£29
£20.99 OFF (42%)£49.99

HP Deskjet 2630 All-in-One Printer

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071954%252f7de11669 25f1 4a14 b7e3 4e2129ce66ae.jpg%252f640x0.jpg?signature=vt35m61jfbsosjg5efqkhnwnibg=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£59.99
£60.00 OFF (50%)£119.99

Canon PIXMA All-In-One Inkjet Printer

From AMAZON
See Details

Home and kitchen 

The best deals on candles, Christmas trees, festive decorations, and more for the happiest time of the year.

Uploads%252fcard%252fimage%252f1071959%252fec1a2704 bd3e 4778 9850 e1011f6eff08.jpg%252f640x0.jpg?signature=od64wt07swcejzwd4h1nvt0zcn8=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£249.99
£149.01 OFF (37%)£399

iRobot Roomba 671 Robot Vacuum Cleaner

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071961%252fc232e251 205c 4bd5 8d8d 5e465d103616.jpg%252f640x0.jpg?signature=nbepjprtolzpaax1qok3crxysry=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£14.99
£5.00 OFF (25%)£19.99

Wooden Advent Calendar

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071963%252fe4d19405 b4dc 4fc6 9e23 185304eb483c.jpg%252f640x0.jpg?signature=puqr2zncwl7bewhtukqqpjxxqxy=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£11.99
£8.00 OFF (40%)£19.99

Wooden Reindeer Advent Calendar

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071965%252f9209ca28 5059 4991 963e 08d1774fe744.jpg%252f640x0.jpg?signature=tafpwksxhzep0ok xbu5yz 4sq0=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£29.99
£8.00 OFF (21%)£37.99

Christmas Tree House Advent Calendar

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071967%252fe5514a89 f38c 4c93 8da8 c104bf5e82e7.jpg%252f640x0.jpg?signature=3qwo qri5n9vshy6u20htpfc9qi=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£10.99
£7.00 OFF (39%)£17.99

Snowman Advent Calendar

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071969%252f16580a39 a159 4cf8 a1a8 761a0075cdfb.jpg%252f640x0.jpg?signature=rbuiwttfzqpki nymjq3ni66p8w=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£137.99
£42 OFF (23%)£179.99

Pre-Lit Victorian Pine Christmas Tree

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071971%252fe3d46d37 e7af 440a 8ad5 82c2a29b06fd.jpg%252f640x0.jpg?signature=83ph8v7 k ne4gcva3wcladsbwu=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£83.99
£66.00 OFF (44%)£149.99

Pre-Lit Edwardian Spruce Christmas Tree

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071973%252f8387b24b 1a0d 4c2f 8ee3 5b04ce2a5683.jpg%252f640x0.jpg?signature=aygzmpodof5xcwrubvn70rl2zr4=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£110.99
£69.00 OFF (38%)£179.99

Pre-Lit Grand Alaskan Fir Christmas Tree

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071975%252f19531368 f24b 45b1 8c8b 18b228561914.jpg%252f640x0.jpg?signature=ax ayqbhbbbhvxd6b1fyr na3zw=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£18.36
£5.63 OFF (23%)£23.99

Yankee Candle Sparkling Cinnamon

From AMAZON
See Details
Uploads%252fcard%252fimage%252f1071977%252f77d4704a 67c5 4018 9131 e2fd03b3d566.jpg%252f640x0.jpg?signature=8cokqdsw6nqc7utkirm4v7u41ko=&source=https%3a%2f%2fblueprint api production.s3.amazonaws
AMAZON
£17.99
£6 OFF (25%)£23.99

Yankee Candle Black Cherry

From AMAZON
See Details

Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

Microsoft

The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy. The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order Cash in hand. Image credit: Obsidian News by Connor Makar Staff Writer Published on July 23

Published 1 month ago in
The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy.

The Outer Worlds 2 is now $10 cheaper, as Obsidian details how to get a refund on your pre-order

Cash in hand.

A character in a leafy ghilli suit leaps over a platform towards the camera while being shot at from afar.
Image credit: Obsidian

Connor Makar avatar

News

by Connor Makar
Staff Writer

Published on

18 comments

The Outer Worlds 2, the upcoming sci-fi FPS by Obsidian Entertainment will now be sold at $70 dollars, rather than the planned $80. This follows a statement by Microsoft confirming the U-turn earlier today.

Those who have already purchased the game at the $80 price point on Steam will have the purchase refunded and re-bought at the lower figure. On Battle.net, those who pre-ordered the game will have their orders cancelled and refunded, and will have to re-buy the game. Those on Xbox and PlayStation will have the difference refunded in the upcoming days.

This announcement was made on The Outer Worlds official social media accounts, with a cute in-universe statement and graphic. On the official Obsidian website, further explanation on how the price change will affect those who’ve already spent money has been provided.

Cover image for YouTube videoThe Outer Worlds 2 – Official Gameplay Trailer

Watch the gameplay trailer

Read More

Continue Reading
Microsoft

Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions”

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy. Home News Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions” Starting with The Outer Worlds 2 Image credit: Obsidian Entertainment News by Vikki Blake Contributor Published

Published 1 month ago in
Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions”

If you click on a link and make a purchase we may receive a small commission. Read our editorial policy.

Microsoft reverses $80 first-party price hike to keep “full priced holiday releases in line with current conditions”

Starting with The Outer Worlds 2

Image credit: Obsidian Entertainment

Vikki Blake avatar

News

by Vikki Blake
Contributor

Published on

Just weeks after confirming The Outer Worlds 2 will be the first Microsoft game to retail for $80, Microsoft has reversed the decision, revealing the highly-anticipated sequel will now launch for $69.99 in keeping with typical AAA pricing.

This will apply not just to The Outer Worlds 2, but indeed other “full priced holiday releases” launched across the period.

In a statement, a Microsoft spokesperson said Xbox was “focused on bringing players incredible worlds to explore, and will keep our full priced holiday releases, including The Outer Worlds 2, at $69.99, in line with current market conditions.”

On social media, developer Obsidian posted: “We have received your SOS via skip drone about the pricing. As an organization devoted to making sure that corporations do not go unfettered, we at the Earth Directorate have worked with [REDACTED] to revise the price of The Outer Worlds 2. While this will not bring peace to the galaxy, or even your local colony, we assure you all that we are here to fight for all colonies in every way that we can.”

Microsoft announced last month that The Outer Worlds 2 would be the first Xbox title to retail at $80 following Microsoft’s planned price rises in May.

“We understand that these changes are challenging, and th

Read More

Continue Reading
Microsoft

Coyote malware abuses Windows accessibility framework for data theft

A new variant of the banking trojan ‘Coyote’ has begun abusing a Windows accessibility feature, Microsoft’s UI Automation framework, to identify which banking and cryptocurrency exchange sites are accessed on the device for potential credential theft. …

Published 1 month ago in
Coyote malware abuses Windows accessibility framework for data theft

A new variant of the banking trojan ‘Coyote’ has begun abusing a Windows accessibility feature, Microsoft’s UI Automation framework, to identify which banking and cryptocurrency exchange sites are accessed on the device for potential credential theft. …
Read More

Continue Reading
Microsoft

Microsoft Server Software Comes Under Widespread Cyberattack

Breadcrumb Trail Links Home PMN Business Share this Story : Microsoft Rushes to Stop Hackers from Wreaking Global Havoc Copy Link Email X Reddit Pinterest LinkedIn Tumblr Microsoft Rushes to Stop Hackers from Wreaking Global Havoc Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the

Published 2 months ago in
Microsoft Server Software Comes Under Widespread Cyberattack

Microsoft Rushes to Stop Hackers from Wreaking Global Havoc

Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Bloomberg News
Jake Bleiberg, Jane Lanhee Lee and Ryan Gallagher
Published Jul 20, 2025

Last updated Jul 21, 2025

4 minute read
Join the conversation

A Microsoft signage in New York, US, on Friday, Oct. 25, 2src24. Microsoft Corp. is scheduled to release earnings figures on October 3src. Photographer: Jeenah Moon/Bloomberg
A Microsoft signage in New York, US, on Friday, Oct. 25, 2024. Microsoft Corp. is scheduled to release earnings figures on October 30. Photographer: Jeenah Moon/Bloomberg Photo by Jeenah Moon /Bloomberg

(Bloomberg) — Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Microsoft over the weekend released a patch for the vulnerability in servers of the SharePoint document management software. The company said it was still working to roll out other fixes after warnings that hackers were targeting SharePoint clients, using the flaw to enter file systems and execute code.

Story continues below

Multiple different hackers are launching attacks through the Microsoft vulnerability, according to representatives of two cybersecurity firms, CrowdStrike Holdings, Inc. and Google’s Mandiant Consulting.

Hackers have already used the flaw to break into the systems of national governments in Europe and the Middle East, according to a person familiar with the matter. In the US, they’ve accessed government systems, including ones belonging to the US Department of Education, Florida’s Department of Revenue and the Rhode Island General Assembly, said the person, who spoke on condition that they not be identified discussing the sensitive information.

Representatives of the Department of Education and Rhode Island legislature didn’t respond to calls and emails seeking comment Monday. A Florida Department of Revenue spokesperson, Bethany Wester Cutillo, said in an email that the SharePoint vulnerability is being investigated “at multiple levels of government” but that the state agency “does not comment publicly on the software we use for operations.”

Story continues below

The hackers also breached the systems of a US-based health-care provider and targeted a public university in Southeast Asia, according to a report from a cybersecurity firm reviewed by Bloomberg News. The report doesn’t identify either entity by name, but says the hackers have attempted to breach SharePoint servers in countries including Brazil, Canada, Indonesia, Spain, South Africa, Switzerland, the UK and the US. The firm asked not to be named because of the sensitivity of the information. 

In some systems they’ve broken into, the hackers have stolen sign-in credentials, including usernames, passwords, hash codes and tokens, according to a person familiar with the matter, who also spoke on condition that they not be identified discussing the sensitive information.

“This is a high-severity, high-urgency threat,” said Michael Sikorski, chief technology officer and head of threat intelligence for Unit 42 at Palo Alto Networks Inc. 

“What makes this especially concerning is SharePoint’s deep integration with Microsoft’s platform, including their services like Office, Teams, OneDrive and Outlook, which has all the information valuable to an attacker,” he said. “A compromise doesn’t stay contained—it opens the door to the entire network.” 

(Bloomberg) — Hackers exploited a security flaw in common Microsoft Corp. software to breach governments, businesses and other organizations across the globe and steal sensitive information, according to officials and cybersecurity researchers.

Microsoft over the weekend released a patch for the vulnerability in servers of the SharePoint document management software. The company said it was still working to roll out other fixes after warnings that hackers were targeting SharePoint clients, using the flaw to enter file systems and execute code.

Story continues below

Multiple different hackers are launching attacks through the Microsoft vulnerability, according to representatives of two cybersecurity firms, CrowdStrike Holdings, Inc. and Google’s Mandiant Consulting.

Hackers have already used the flaw to break into the systems of national governments in Europe and the Middle East, according to a person familiar with the matter. In the US, they’ve accessed government systems, including ones belonging to the US Department of Education, Florida’s Department of Revenue and the Rhode Island General Assembly, said the person, who spoke on condition that they not be identified discussing the sensitive information.

Representatives of the Department of Education and Rhode Island legislature didn’t respond to calls and emails seeking comment Monday. A Florida Department of Revenue spokesperson, Bethany Wester Cutillo, said in an email that the SharePoint vulnerability is being investigated “at multiple levels of government” but that the state agency “does not comment publicly on the software we use for operations.”

Story continues below

The hackers also breached the systems of a US-based health-care provider and targeted a public university in Southeast Asia, according to a report from a cybersecurity firm reviewed by Bloomberg News. The report doesn’t identify either entity by name, but says the hackers have attempted to breach SharePoint servers in countries including Brazil, Canada, Indonesia, Spain, South Africa, Switzerland, the UK and the US. The firm asked not to be named because of the sensitivity of the information. 

In some systems they’ve broken into, the hackers have stolen sign-in credentials, including usernames, passwords, hash codes and tokens, according to a person familiar with the matter, who also spoke on condition that they not be identified discussing the sensitive information.

“This is a high-severity, high-urgency threat,” said Michael Sikorski, chief technology officer and head of threat intelligence for Unit 42 at Palo Alto Networks Inc. 

“What makes this especially concerning is SharePoint’s deep integration with Microsoft’s platform, including their services like Office, Teams, OneDrive and Outlook, which has all the information valuable to an attacker,” he said. “A compromise doesn’t stay contained—it opens the door to the entire network.” 

Trending

  1. Canadian steel has no ‘practical’ foreign markets beyond U.S., says Algoma CEO

    Algoma Steel

    Commodities

  2. Howard Levitt: The strike threat from Air Canada’s flight attendants is a moonshot — and unlikely to land

    An Air Canada flight prepares to land at Toronto Pearson International Airport in Mississauga, Ont.

    Work

  3. Story continues below

  4. What you need to know in the event of an Air Canada strike

    The Air Canada check-in kioks at the Calgary International Airport.

    Airlines

  5. ‘Worst jobs reading in three years’ raises odds of Bank of Canada rate cut next month

    jobs board

    Economy

  6. Posthaste: Did Ontario’s premier just try to mess with the Bank of Canada’s independence again?

    Doug Ford

    News

Advertisement

Tens of thousands — if not hundreds of thousands — of businesses and institutions worldwide use SharePoint in some fashion to store and collaborate on documents. Microsoft said that attackers are specifically targeting clients running SharePoint servers from their own on-premise networks, as opposed to being hosted and managed by the tech firm. That could limit the impact to a subsection of customers.

A Microsoft spokesperson declined to comment beyond an earlier statement.

“It’s a dream for ransomware operators,” said Silas Cutler, a researcher at Michigan-based cybersecurity firm Censys. He estimated that more than 10,000 companies with SharePoint servers were at risk. The US had the largest number of such firms, followed by the Netherlands, the UK and Canada, he said. 

The breaches have drawn new scrutiny to Microsoft’s efforts to shore up its cybersecurity after a series of high-profile failures. The firm has hired executives from places like the US government and holds weekly meetings with senior executives to make its software more resilient. The company’s tech has been subject to several widespread and damaging hacks in recent years, and a 2024 US government report described the company’s security culture as in need of urgent reforms.

Story continues below

The Center for Internet Security, which operates a cybersecurity information sharing system for state and local governments in the US, found more than 1,100 servers that are at risk from the SharePoint vulnerability, said Randy Rose, the organization’s vice president of security operations and intelligence. Rose said more than 100 were likely hacked.

The Washington Post reported that the breach had affected US federal and state agencies, universities, energy companies and an Asian telecommunications company, citing state officials and private researchers.

Eye Security was the first to identify that attackers were actively exploiting the vulnerabilities in a wave of cyberattacks that began on Friday, said Vaisha Bernard, the company’s chief hacker and co-owner.

Eye Security said the vulnerability allows hackers to access SharePoint servers and steal keys that can let them impersonate users or services even after the server is patched. It said hackers can maintain access through backdoors or modified components that can survive updates and reboots of systems.

Story continues below

The SharePoint vulnerabilities, known as “ToolShell,” were first identified in May by researchers at a Berlin cybersecurity conference. In early July, Microsoft issued patches to fix the security holes, but hackers found another way in.

“There were ways around the patches,” which enabled hackers to break into SharePoint servers by tapping into similar vulnerabilities, said Bernard. “That allowed these attacks to happen.” The intrusions, he said, were not targeted and instead were aimed at compromising as many victims as possible. After scanning about 8,000 SharePoint servers, Bernard said he has so far identified at least 50 that were successfully compromised.

He declined to identify the identity of organizations that had been targeted, but said they included government agencies and private companies, including “bigger multinationals.” The victims were located in countries in North and South America, the EU, South Africa, and Australia, he added.

—With assistance from Lynn Doan, Cameron Fozi, Daniel Cancel, Aashna Shah, Jane Lanhee Lee and Patrick Howell O’Neill.

(Updates with additional information beginning in third paragraph.)

Comments
You must be logged in to join the discussion or read more comments.
Create an AccountSign in
Join the Conversation

Postmedia is committed to maintaining a lively but civil forum for discussion. Please keep comments relevant and respectful. Comments may take up to an hour to appear on the site. You will receive an email if there is a reply to your comment, an update to a thread you follow or if a user you follow comments. Visit our Community Guidelines for more information.

Read More

Continue Reading