A widespread cyberattack targeting Microsoft’s (MSFT.O) server software used by thousands of government agencies and businesses for internal document sharing was likely orchestrated by a single actor, a cybersecurity researcher said on Monday.

Microsoft issued an alert on Saturday warning of “active attacks” on on-premise SharePoint servers.

The company clarified that SharePoint Online, part of the Microsoft 365 cloud suite, was not affected by the exploit, which is considered a “zero-day” vulnerability due to its previously undiscovered nature.

“Based on the consistency of the tradecraft seen across observed attacks, the campaign launched on Friday appears to be a single actor. However, it’s possible that this will quickly change,” Rafe Pilling, director of Threat Intelligence at Sophos, a British cybersecurity firm.

That tradecraft included the sending of the same digital payload to multiple targets, Pilling added.

Microsoft said it had “provided security updates and encourages customers to install them,” a company spokesperson said in an emailed statement.

It was not clear who was behind the ongoing hack. The FBI said on Sunday it was aware of the attacks and was working closely with its federal and private-sector partners, but offered no other details.

Britain’s National Cyber Security Centre did not immediately respond to a request for comment.

The Washington Post said unidentified actors in the past few days had exploited a flaw to launch an attack that targeted U.S. and international agencies and businesses.

According to data from Shodan, a search engine that helps to identify internet-linked equipment, over 8,000 servers online could theoretically have already been compromised by hackers.

Those servers include major industrial firms, banks, auditors, healthcare companies, and several U.S. state-level and international government entities.

“The SharePoint incident appears to have created a broad level of compromise across a range of servers globally,” said Daniel Card of British cybersecurity consultancy, PwnDefend.

“Taking an assumed breach approach is wise, and it’s also important to understand that just applying the patch isn’t all that is required here.”

Central Securities Clearing System Plc (CSCS), Nigeria’s capital market infrastructure provider, has launched its Custodian Portal, a user-centric digital solution designed to optimise custodian operations through intuitive, secure and efficient features.

Haruna Jalo-Waziri, Chief Executive Officer (CEO), CSCS, announced this in a statement on Monday.

The CSCS is a Public Limited Company with a diversified shareholder base, which serves as the Central Securities Depository for the Nigerian Capital Market.

It serves as the Central Depository for Equities, Commercial Papers, Corporate Bonds, Sub-National Bonds, certain Sovereign Bonds like the FGN Sukuk and the FGN Savings Bond, Equity-traded Funds, Real Estate Investment Trusts, Mutual funds and Commodities.

Jalo-Waziri said that the custodian portal offered a streamlined experience for market participants with powerful tools that facilitate comprehensive portfolio and trade management, document tracking, share transfer operations, client symbol search, and real-time access to vital data.

He explained that the portal, designed to operate through a flexible subscription-based model, empowered users to manage their records effortlessly and securely through convenient payment channels such as GTPay and Paystack.

According to him, “Digital transformation remains at the core of our strategy to enhance the efficiency, transparency and accessibility of Nigeria’s capital market services.

“The custodian portal is a significant leap in that direction, offering custodians a centralised platform to manage critical processes in real-time.

“We are excited about the value this innovation brings to our stakeholders, and we will continue to evolve the platform in line with users’ needs and industry trends.”

The CEO also explained that the portal was designed with user experience in mind with feature tools like portfolio viewing and downloads in PDF or Excel format.

He further said that it also featured tracking of stock movements across date ranges, inbox messaging and request tracking, as well as robust user management capabilities including role assignment and status tracking.

Similarly, the Divisional Head, Business Technology and Digital Innovation, CSCS Plc, Tobe Nnadozie, said that the portal aligned with CSCS’s drive to automate the market.

“In addition to the normal features, the platform is a part of an omnichannel platform for custodians, and includes API services.

“It also connects to the market-wide workflow, which CSCS has built to ensure secured communication and approvals across all major stakeholders in the market.

“The platform is well secured with best-of-breed cybersecurity solutions and our SOC,” he said.

The Custodian Portal reinforces CSCS’s commitment to leveraging technology to streamline back-office functions and support a more agile, data-driven capital market ecosystem.

All custodians in the Nigerian capital market have now been successfully on-boarded on the Custodian Portal, marking a significant milestone in CSCS’s ongoing drive to enhance collaboration, standardise operational processes, and promote digital adoption across the market.

The House of Representatives has launched an investigation into 25 insurance companies over alleged financial infractions that have reportedly led to the loss of hundreds of billions of naira in government revenue.

Chairman of the House Sub-Committee on Capital Market and Institutions, Hon. Kwamoti Laori, made the disclosure on Monday during a meeting with representatives of the affected companies at the National Assembly Complex in Abuja.

Laori said the probe was prompted by petitions accusing the companies of violating statutory provisions in their operations, thereby shortchanging the federal government.

“This committee is saddled with the responsibility of addressing a petition based on infractions by these insurance companies regarding their operations and non-compliance with certain statutory provisions,” he said.

“These infractions have led to the federal government losing hundreds of billions of naira in revenue. That is why the companies were invited—to either confirm or refute the liabilities ascribed to them.”

According to the lawmaker, each of the 25 companies had been formally notified of their respective liabilities and summoned to explain their financial dealings.

“The essence of this engagement is to ensure that what is due to the federal government from these private entities is fully remitted,” Laori added.

He emphasized that it is within the constitutional mandate of the National Assembly to track government revenue and block leakages, particularly in sectors involving private sector collaboration.

The committee also frowned at some of the companies’ attempt to stall the investigation by resorting to legal action.

“Some of the companies have gone to court and served the House with court processes. It is now up to us and the House leadership to examine those court papers,” Laori said. “If the court action does not affect the core of our mandate, we will proceed. If it does, we’ll await the court’s decision.”

He criticized what he described as a strategy aimed at obstructing parliamentary oversight.

“Going to court appears to be a deliberate attempt to throw a spanner in the works of the National Assembly,” he stated.

Laori also expressed dissatisfaction with the failure of some company heads to appear in person, instead sending representatives who were unable to respond to critical questions.

“We have insisted that Chief Operating Officers (COOs) must appear in person. One of the COOs sent someone who couldn’t answer any of the allegations—this is unacceptable,” he said. “It is the same people that will later accuse the National Assembly of not doing its job.”

The committee chairman did not spare the industry’s regulator—the National Insurance Commission (NAICOM)—which he accused of negligence.

“NAICOM has a supervisory role, and if they were doing their job effectively, we wouldn’t be here conducting this investigation. They need to sit up,” Laori said.

Meanwhile, 17 of the companies currently in court sent a legal representative, Mr. Abimbola Kayode, to the hearing on Monday.