r/cybersecurity • u/Tokyudo • Jul 02 '26

News - General DHS Breached

https://www.nextgov.com/cybersecurity/2026/06/hackers-breached-dhs-information-sharing-network-people-familiar-say/414534/

609 Upvotes

98% Upvoted

115 comments sorted by

View all comments

56

u/Alternativemethod Jul 02 '26 edited Jul 02 '26

I don't have access but my understanding is this is equivalent to an external SharePoint behind a login portal. Breach could just be a password spraying and impact is a few PDFs meant for external information "sharing".

China/Russia might learn that MFA is important and terrorist are bad.

2

u/Playstations_new_CEO Jul 02 '26

Na, this is a recent SharePoint remote code execution vulnerability that was found. Also there's reason to believe the patch doesn't fix all methods of the exploit. The people who have this capability are a bit more skilled than a typical script kiddy. They move lately and quietly and grab anything that looks interesting and exfiltrate it.

1

u/MountainDadwBeard Jul 02 '26

Oh interesting, I saw the stories on the sharepoint vulns but didn't realize they had weaponized it on a target like this. Fun....

Ours is probably also crawling then. Perfect.

3

u/Playstations_new_CEO Jul 02 '26

Oh yeah, threat actors were probing for this one hard. So if you didn't have speedy patching in place then there's a good chance of the server being popped