Archive · 25 Jul 2025
China-Linked Hackers Exploit Microsoft SharePoint Flaw
Chinese hackers found a way to break into Microsoft's SharePoint software, a tool used to store documents.
Microsoft released updates to fix the problem, but the fixes didn't work and actually helped the hackers.
Over 400 servers, some belonging to government agencies, were hacked.
Critics say Microsoft hasn't focused enough on security and is prioritizing profits and AI.
Microsoft has released new patches and told users to change their secret keys to stop the hackers.
Microsoft's SharePoint software was targeted by China-linked hackers.
Faulty security patches released in July were quickly bypassed.
Over 400 SharePoint servers, including government entities, were hacked.
Microsoft has been criticized for prioritizing AI and profits over security.
Microsoft has released emergency patches and advises users to change cryptographic keys.
- Who
- China-linked hackers exploited vulnerabilities.
- What
- China-linked hackers exploited vulnerabilities in Microsoft's SharePoint software.
- When
- The hacks began in May at a hacking contest and were discovered in July.
- Where
- SharePoint servers worldwide, including government entities.
- Why
- Exploiting a security flaw in Microsoft's SharePoint software
Criticism of Microsoft
Microsoft's Response
Microsoft's Security
Criticism of Microsoft
Microsoft is too big to fail and needs to improve their security efforts.
Microsoft's Response
Microsoft is doing what it can to prevent attacks
Priorities
Criticism of Microsoft
Microsoft is prioritizing AI and profits over security.
Microsoft's Response
Microsoft is doing everything it can to protect its products and customers
- Software targeted
- Microsoft SharePoint
- Number of servers hacked
- Over 400
- Entity responsible
- China-linked hackers
- Security patches released
- July 8, emergency patches released later
- Contest Location
- Berlin