More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.

The department has been holding daily calls with Microsoft since the zero-day was discovered, the DOD CIO said at an event Thursday.

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.

The hackers behind the initial wave of attacks exploiting a zero-day in Microsoft SharePoint servers have so far primarily targeted government organizations, according to researchers and news reports.

Hours after Microsoft revealed hacking groups affiliated with the Chinese government have been exploiting a flaw in its SharePoint software, Bloomberg News reports that the National Nuclear Security Administration has also been breached in the attacks.

Microsoft has released a critical patch for a security flaw in its SharePoint software. Hackers actively exploited this vulnerability, targeting businesses and US government agencies. The company issued the fix between July 19 and 20.

Microsoft Corp. said a Chinese hacking group is exploiting security vulnerabilities in the company’s SharePoint servers to deploy ransomware, following a cyberattack discovered last week that has affected hundreds of entities around the world.

Microsoft identified three China-based hacking groups targeting SharePoint vulnerabilities in the ongoing cyberattack, and urged customers to ensure they've applied security updates.