Archive · 24 Jul 2025
Microsoft SharePoint Hack Hits Hundreds of Firms, US Agencies
Imagine hackers found a secret back door in Microsoft's SharePoint servers.
They used this to sneak into hundreds of companies and government groups, like the National Nuclear Security Administration.
Microsoft says Chinese hackers are likely behind it.
These hackers can now steal important information, maybe even your passwords!
The security flaw lets them pretend to be you on the computer, and the problem is still developing, with more groups likely to be affected.
Microsoft has fixed the back door, but the hackers might have already gotten in.
Government agencies are now investigating and attempting to contain the damage, with cybersecurity as a challenge faced globally.
Microsoft's SharePoint servers experienced a security vulnerability leading to hundreds of breaches.
Approximately 400 organizations, including government agencies and corporations, have been compromised.
Microsoft blames Chinese state-sponsored hackers for the attacks.
The US, along with other nations, has been affected by the breaches.
The attacks could allow deep access to networks and potential theft of confidential data.
- Who
- Hackers, potentially linked to China, are exploiting the vulnerability.
- What
- A security vulnerability in Microsoft's SharePoint servers was exploited, leading to hundreds of breaches.
- When
- The attacks are ongoing.
- Where
- United States, South Africa, and other countries have been affected.
- Why
- To access systems, potentially steal data, and maintain long-term access.
Microsoft and US View
China's View
Attribution
Microsoft and US View
Microsoft blames Chinese hackers.
China's View
China denies involvement and opposes attacks under the excuse of cybersecurity issues.
- Affected Organizations
- Approximately 400
- Primary Target
- Government agencies, corporations
- Vulnerability
- Microsoft SharePoint Servers
- Attributed to
- Chinese state-sponsored hackers
- Microsoft Response
- Issued patches to fix vulnerabilities
- Involved Agencies
- US Cybersecurity and Infrastructure Security Agency, National Institutes of Health