Archive · 26 Jul 2025
Microsoft Investigates Leak Potentially Enabling SharePoint Exploits
Microsoft is looking into whether a leak from its early warning system helped Chinese hackers attack its SharePoint software.
This may have let them use flaws before they were fixed.
Microsoft is investigating a possible leak from its MAPP program.
Chinese hacking groups are suspected of using the information for cyberattacks.
A security patch didn't fully fix the problem.
Microsoft is investigating a potential leak from its MAPP program.
The leak might have allowed Chinese hackers to exploit SharePoint flaws.
Two Chinese hacking groups, Linen Typhoon and Violet Typhoon, are implicated.
A security patch released by Microsoft failed to fully fix the vulnerability.
A researcher demonstrated the SharePoint vulnerability at a cybersecurity conference in May.
- Who
- Potentially China-linked hacking groups, including Linen Typhoon and Violet Typhoon.
- What
- Investigation of a potential leak from Microsoft's MAPP program and the exploitation of SharePoint vulnerabilities.
- When
- Exploitation attempts were first observed on July 7; Microsoft is investigating a potential earlier leak.
- Where
- Globally, targeting organizations using Microsoft SharePoint.
- Why
- To exploit vulnerabilities in Microsoft SharePoint software.
- Software Affected
- Microsoft SharePoint
- Vulnerability
- SharePoint flaw
- Groups Involved
- Linen Typhoon, Violet Typhoon (suspected)
- Possible Cause
- Leak from Microsoft Active Protections Program (MAPP)
- First observed exploit attempts
- July 7
- Researcher Demonstration
- Pwn2Own cybersecurity conference in Berlin
