Archive · 23 Jul 2025
Chinese Hackers Exploit SharePoint, Targeting US Nuclear Agency
Imagine bad guys from China found a way to break into computers that use a program called SharePoint.
They used a secret trick that allowed them to sneak in.
These hackers targeted important places like the US agency that handles nuclear weapons.
They got into over 100 places worldwide, but luckily, they didn't steal any top-secret information from the nuclear weapons agency.
Microsoft, the company that makes SharePoint, is fixing the problem.
They are telling everyone to update their software to close the security hole.
China says they didn't do it, but the investigation is still going on.
Chinese state-backed hackers breached the US National Nuclear Security Administration using SharePoint vulnerabilities.
Hackers exploited zero-day vulnerabilities in Microsoft's SharePoint software to gain access.
Over 100 organizations worldwide, including government agencies and energy companies, were affected.
Microsoft has released security updates and urged customers to patch their systems immediately.
China denies the allegations of involvement in the cyberattacks.
- Who
- Chinese state-backed hackers, including groups Violet Typhoon, Linen Typhoon, and Storm-2603.
- What
- Cyberattacks exploiting SharePoint vulnerabilities.
- When
- Attacks began on July 18; Microsoft's blog post on July 22.
- Where
- United States, Europe, and the Middle East, affecting over 100 organizations.
- Why
- To gain access to networks and steal credentials; the exact motives are still under investigation.
Accusations of Cyber Espionage
Denial of Involvement
Attribution and Responsibility
Accusations of Cyber Espionage
The United States government and cybersecurity experts believe the cyberattacks originated from China and were state-sponsored, using sophisticated techniques to breach sensitive networks.
Denial of Involvement
The Chinese Embassy in Washington denies the allegations, urging parties to base their conclusions on solid evidence.
- Target
- US National Nuclear Security Administration and over 100 other organizations
- Vulnerability
- Zero-day exploits in Microsoft SharePoint
- Affected Software
- On-premises SharePoint systems
- Attributed To
- Chinese state-backed hackers
- Response
- Microsoft released security updates; China denies involvement