Space & Science

Key Takeaways: A coordinated phishing attack has breached sensitive patient data at multiple cancer care providers in the U.S. The breach exposed personal health information, including names, addresses, diagnoses, and financial data. More than 130,000 individuals have been impacted, and steps are being taken to protect affected individuals. A phishing campaign has compromised the data […]

NEWYou can now listen to Fox News articles!
Hackers are actively exploiting a new zero-day bug in Microsoft’s SharePoint Server software. The same software is used by key U.S. government agencies, including those tied to national security. The vulnerability affects on-premise versions of SharePoint, allowing attackers to break into systems, steal data and quietly move through connected services. While the cloud version is unaffected, the on-premise version is widely used by major U.S. agencies, universities and private companies. That puts far more than just internal systems at risk.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTERNATIONAL SECURITY EXPERTS RAISE CONCERNS AFTER MICROSOFT PROGRAM EXPOSED AS POSSIBLE AVENUE FOR CHINESE SPYING Microsoft apps on the homescreen of a smartphone   (Kurt “CyberGuy” Knutsson)SharePoint zero-day: What you need to know about the exploitThe exploit was first identified by cybersecurity firm Eye Security July 18. Researchers say it stems from a previously unknown vulnerability chain that can give attackers full control of vulnerable SharePoint servers without needing any credentials. The flaw lets them steal machine keys used to sign authentication tokens, meaning attackers can impersonate legitimate users or services even after a system is patched or rebooted.According to Eye Security, the vulnerability appears to be based on two bugs demonstrated at the Pwn2Own security conference earlier this year. While those exploits were initially shared as proof-of-concept research, attackers have now weaponized the technique to target real-world organizations. The exploit chain has been dubbed “ToolShell.”WHAT IS ARTIFICIAL INTELLIGENCE (AI)?How the SharePoint vulnerability lets hackers access Microsoft servicesOnce inside a compromised SharePoint server, hackers can access connected Microsoft services. These include Outlook, Teams and OneDrive. This puts a wide range of corporate data at risk. The attack also allows hackers to maintain long-term access. They can do this by stealing cryptographic material that signs authentication tokens. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to act. It recommends checking systems for signs of compromise and isolating vulnerable servers from the internet.Early reports confirmed about 100 victims. Now, researchers believe attackers have compromised more than 400 SharePoint servers worldwide. However, this number refers to servers, not necessarily organizations. According to reports, the number of affected groups is growing rapidly. One of the highest-profile targets is the National Nuclear Security Administration (NNSA). Microsoft confirmed it was targeted but has not confirmed a successful breach.Other affected agencies include the Department of Education, Florida’s Department of Revenue and the Rhode Island General Assembly. Microsoft’s name and logo on a building (Kurt “CyberGuy” Knutsson)Microsoft confirms SharePoint exploit and releases patchesMicrosoft confirmed the issue, disclosing that it was aware of “active attacks” exploiting the vulnerability. The company has released patches for SharePoint Server 2016, SharePoint Server 2019 and SharePoint Subscription Edition. Patches for all supported on-prem versions were issued as of July 21.GET FOX BUSINESS ON THE GO BY CLICKING HEREWhat you should do about the SharePoint security riskIf you’re part of a business or organization that runs its own SharePoint servers, especially older on-premise versions, your IT or security team should take this seriously. Even if a system is patched, it could still be at risk if machine keys were stolen. Administrators should also rotate cryptographic keys and audit authentication tokens. For the general public, there’s no action needed right now since this issue doesn’t affect cloud-based Microsoft accounts like Outlook.com, OneDrive or Microsoft 365. But it’s a good reminder to stay cautious online. Microsoft’s name and logo on a building (Kurt “CyberGuy” Knutsson)What you should do about the SharePoint security riskIf your organization uses on-premise SharePoint servers, take the following steps right away to reduce risk and limit potential damage:1. Disconnect vulnerable servers: Take unpatched SharePoint servers offline immediately to prevent active exploitation.2. Install available updates: Apply Microsoft’s emergency patches for SharePoint Server 2016, 2019 and Subscription Edition without delay.3. Rotate authentication keys: Replace all machine keys used to sign authentication tokens. These may have been stolen and can allow ongoing access even after patching.4. Scan for compromise: Check systems for signs of unauthorized access. Look for abnormal login behavior, token misuse or lateral movement within the network.5. Enable security logging: Turn on detailed logging and monitoring tools to help detect suspicious activity going forward.6. Review connected services: Audit access to Outlook, Teams and OneDrive for signs of suspicious behavior linked to the SharePoint breach.7. Subscribe to threat alerts: Sign up for advisories from CISA and Microsoft to stay updated on patches and future exploits.8. Consider migration to the cloud: If possible, transition to SharePoint Online, which offers built-in security protection and automatic patching.9. Strengthen passwords and use two-factor authentication: Encourage employees to stay vigilant. Even though this exploit targets organizations, it’s a good reminder to enable two-factor authentication (2FA) and use strong passwords. Create strong passwords for all your accounts and devices, and avoid using the same password for multiple online accounts. Consider using a password manager, which securely stores and generates complex passwords, reducing the risk of password reuse. Check out the best expert-reviewed password managers of 2025 at Cyberguy.com/PasswordsCLICK HERE TO GET THE FOX NEWS APPKurt’s key takeawayThis SharePoint zero-day shows how fast research can turn into real attacks. What started as a proof-of-concept is now hitting hundreds of real systems, including major government agencies. The scariest part isn’t just the access it gives but how it lets hackers stay hidden even after you patch. Should there be stricter rules around using secure software in government? Let us know by writing to us at Cyberguy.com/ContactSign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTERCopyright 2025 CyberGuy.com.  All rights reserved.  

NEWYou can now listen to Fox News articles!
Facebook, being a platform used by billions, is flooded with all kinds of accounts. However, not all of them are genuine. Many are bots that often hijack comment sections, posting the same messages repeatedly. There are also accounts that have built their entire follower base by sharing content originally created by others. Meta seems to have realized the platform needs some cleaning, and it has announced that a staggering 10 million accounts were deleted in the first half of 2025 alone. The purge, it seems, is far from over.Sign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTERMETA ADDS TEEN SAFETY FEATURES TO INSTAGRAM, FACEBOOK Facebook app on the home screen of a smartphone    (Kurt “CyberGuy” Knutsson)What you need to know about Facebook’s recent account removalsMeta says it deleted around 10 million accounts in the first half of 2025, mostly for impersonation, spam behavior and fake engagement. This is part of a broader effort to promote original content and clean up the platform and prioritize original content. The accounts were taken down for impersonating large content producers, according to the company, which shared the update in a blog post aimed at creators. WHAT IS ARTIFICIAL INTELLIGENCE (AI)?The crackdown is part of a broader initiative “to make Feed more relevant and help authentic creators break through,” with Meta starting by “cracking down on spammy content.” In addition to the 10 million impersonator accounts, the company says it took action on around 500,000 accounts engaged in spammy behavior or fake engagement. The company is also enforcing stricter policies to cut down on what it calls unoriginal content. It defines this as posts that repeatedly reuse or repurpose another creator’s work without giving credit. Facebook login on a smartphone    (Kurt “CyberGuy” Knutsson)Meta is pushing for uniquenessMeta says it’s not targeting creators who participate in trends or remix existing content. What matters is whether they add something original to the mix. The company encourages reaction videos, commentary and other transformative uses of content. But accounts that repeatedly repost others’ work without permission or meaningful changes will face consequences. These actions include reducing how widely Meta shows their content and temporarily disabling access to monetization features. If Meta’s systems detect duplicate videos, the platform will prioritize the original version and limit the reach of the copies. The company is also experimenting with ways to credit original creators more clearly, such as adding links back to the source video. To help creators maintain visibility and reach, Meta recommends focusing on original content, avoiding third-party watermarks and making substantial edits when using material from other sources. Basic stitching or watermarking, the company notes, doesn’t count as a meaningful transformation.GET FOX BUSINESS ON THE GO BY CLICKING HEREWhy Meta’s crackdown matters to creatorsMeta’s crackdown isn’t just about removing spam. It directly affects how content is ranked, shown and monetized. For creators, especially smaller ones trying to expand an audience, originality now plays a bigger role than ever. If your content is flagged as unoriginal or spammy, Facebook may stop showing it in people’s feeds. That can tank your reach and, in some cases, cut off access to monetization tools like in-stream ads or bonus programs.On the flip side, creators who focus on making unique content or thoughtfully transforming existing media have a better shot at standing out. Meta says it’s adjusting its algorithms to boost authentic voices. That could help original creators gain more traction if they play by the new rules. Facebook app on a smartphone  (Kurt “CyberGuy” Knutsson)How to avoid penalties under Meta’s new content rulesTo prevent Meta from flagging or removing your Facebook account under its new policies, especially if you’re a creator or post content regularly, follow these key steps:1. Post original content. Share content you created yourself, whether it’s photos, videos, text or anything else. Meta is more likely to penalize accounts that mostly rely on reposted or recycled material.2. Transform content if you reuse it. If you’re sharing someone else’s content (with permission or under fair use), add real value. Think reaction videos, voiceover, commentary or edits that change the context or experience. Simply stitching clips together or slapping on a watermark won’t cut it.3. Avoid impersonation and spam tactics. Don’t pretend to be another creator or brand, and don’t rely on engagement bait (like spamming comment sections or repetitive hashtags). Meta is actively removing accounts that engage in fake interactions.4. Avoid using visible third-party watermarks. If your video shows clear signs of being recycled from another app, such as a TikTok watermark, Meta may flag it. Upload clean versions without logos or branding from other platforms.CLICK HERE TO GET THE FOX NEWS APPKurt’s key takeawayMeta cracking down on spam and fake accounts is a step in the right direction, especially for creators who’ve been struggling to get noticed. Facebook has been messy for a while now, with the same videos and memes popping up from different pages and bots flooding comment sections.Have you noticed more recycled content on your Facebook Feed lately? Let us know by writing to us at Cyberguy.com/ContactSign up for my FREE CyberGuy ReportGet my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTERCopyright 2025 CyberGuy.com.  All rights reserved.