06:25 AM EDT, 07/22/2025 (MT Newswires) -- Hackers have already used a Microsoft ( MSFT ) vulnerability to access government systems in the US, Europe, and the Middle East, Bloomberg News reported Monday, citing sources familiar with the matter.
Targets include the US Department of Education, Florida's Department of Revenue, and the Rhode Island General Assembly, Bloomberg News cited the source as saying.
Microsoft ( MSFT ) issued a patch for the flaw in its SharePoint platform over the weekend and is still rolling out additional fixes, the news outlet reported.
Multiple hacker groups are exploiting the issue, which allows access to file systems and remote code execution, the news outlet added, citing CrowdStrike and Mandiant Consulting.
A cybersecurity firm's report reviewed by Bloomberg News said attackers also breached a US health-care provider and a Southeast Asian university, and have targeted servers in countries including Brazil, the UK, and South Africa.
Hackers have reportedly stolen login credentials such as usernames, passwords, hashes, and tokens from affected systems.
The attacks targeted self-hosted SharePoint instances, while Microsoft ( MSFT )-hosted systems remained unaffected, Reuters reported.
Eye Security's internet scan uncovered nearly 100 victims before the attack method was widely known, including many in the US and Germany, Reuters added.
Microsoft ( MSFT ) did not immediately respond to MT Newswires' request for comment.
(Market Chatter news is derived from conversations with market professionals globally. This information is believed to be from reliable sources but may include rumor and speculation. Accuracy is not guaranteed.)