[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZUhJQL1fHgtZrTrCTj20HECtryvk8kj36xu5qwRrFcM":3},{"article":4,"iocs":49},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":31},"d2efc080-d9eb-4b88-8ead-d7d7732e3cd7","Swiss government SharePoint breach compromised 200 accounts","swiss-government-sharepoint-breach-compromised-200-accounts-453404","Switzerland's federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts. [...]","Hackers exploited vulnerabilities in Microsoft SharePoint servers used by the Swiss government, compromising approximately 200 accounts. The Federal Office for Information Technology and Telecommunication (BIT) detected the attack and has since blocked external access, patched vulnerabilities, and reset affected accounts. While the specific vulnerability is unconfirmed, it is believed to be one of several SharePoint flaws patched by Microsoft in July 2026.","Swiss government SharePoint servers breached, compromising ~200 accounts.","Swiss government SharePoint breach compromised 200 accounts By Lawrence Abrams August 6, 2026 02:14 PM 0 Switzerland’s federal IT office says hackers exploited vulnerabilities to breach its Microsoft SharePoint servers and compromised approximately 200 accounts. The Federal Office for Information Technology and Telecommunication (BIT) detected the cyberattack after security specialists noticed unusual activity on its SharePoint servers on July 28. After confirming the breach, BIT blocked external internet access to SharePoint, patched the suspected vulnerabilities, and reset the passwords for the affected accounts. \"During the analysis, security specialists discovered on Friday, July 31, that the login credentials for several accounts had been compromised,\" BIT said. The agency believes the attackers exploited SharePoint vulnerabilities disclosed by Microsoft in mid-July and fixed in the July Patch Tuesday updates. However, it has not disclosed which flaw was used. The attack potentially involved either CVE-2026-56164, an actively exploited SharePoint privilege escalation vulnerability, or CVE-2026-50522, a critical remote code execution flaw later exploited to steal SharePoint machine keys and maintain access after servers were patched. Both of these flaws were fixed as part of the July 2026 Patch Tuesday updates. It remains unclear whether either vulnerability was used in the Swiss government attack or whether the attackers exploited another flaw fixed in the same updates. BIT is investigating the incident with assistance from the Swiss Federal Office for Cyber Security and Microsoft. So far, it has found no evidence that data was stolen beyond the compromised login credentials. The agency said confidential information and particularly sensitive personal data are not permitted to be stored on the affected SharePoint platform. BIT is reinstalling the compromised servers as a precaution, and external access will remain blocked until that work is completed. Federal employees can continue accessing documents and sharing them with external personnel through alternative methods. At this time, no ransomware or data extortion group has claimed responsibility for the breach. BleepingComputer contacted BIT to ask which vulnerability was exploited and whether its investigation had uncovered evidence of data theft, but a response was not immediately available. Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper Related Articles: South Korea discloses data breach impacting diplomats worldwideCritical SharePoint RCE flaw exploited to steal machine keysTP-Link patches Omada ZTP flaws allowing hackers to breach networksN-able warns of N-central auth bypass flaw exploited in attacksCOLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fswiss-government-sharepoint-breach-compromised-200-accounts\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F06\u002F30\u002FSwitzerland-flag.jpg","2026-08-06T18:14:19+00:00","2026-08-06T20:00:21.017254+00:00",8,[18,21,24],{"name":19,"type":20},"SharePoint","product",{"name":22,"type":23},"Microsoft","vendor",{"name":25,"type":20},"Microsoft SharePoint","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,34,39,44],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-56164","Potentially exploited SharePoint privilege escalation vulnerability",{"type":51,"value":55,"context":56},"CVE-2026-50522","Potentially exploited SharePoint remote code execution flaw"]