Hackers have managed to gain access to the U.S. National Nuclear Security Administration. The government agency designs and maintains the country's nuclear weapons.
According to a spokesperson, the intrusion occurred via ToolShell: "The department was minimally affected due to the widespread use of the Microsoft M365 cloud and highly capable cyber security systems. (...) A very small number of systems were affected. All affected systems are being restored." No sensitive or classified data would have been compromised in the process.
At issue are two vulnerabilities in Microsoft SharePoint that converge on ToolShell: CVE-2025-53770 and CVE-2025-53771. Microsoft has urgently made available two emergency patches. Also, the tech company has published detailed additional, mandatory mitigation steps that software administrators should take to protect their installations.
According to Bloomberg, the victims of the attack would include several governments in Europe and the Middle East, as well as the U.S. Department of Education, the Florida Department of Revenue and the Rhode Island General Assembly.
Click here for Bloomberg's report.
