Comment on Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day

• Oisteink@feddit.nl ⁨4⁩ ⁨days⁩ ago

  Yepp - it was, but that day was 11. June

  source

  • Passerby6497@lemmy.world ⁨4⁩ ⁨days⁩ ago

    I don’t think that’s true either, based on the reporting it’s based on a bug disclosed at a hacking conference in May. No clue how this is a zero day if it’s based on a 2 month old bug reported to the vendor.

    Seems more like bot standard Microsoft fucking around and waiting too long to patch before it got used.

    source

    • purplemonkeymad@programming.dev ⁨3⁩ ⁨days⁩ ago

      Iirc there was a previous attempt to patch this, it would appear a slight variation was not fixed in the patch. Might be why people are saying zero day.

      source