Archive · 24 Jul 2025
Microsoft: China-Linked Groups Behind SharePoint Server Hack
Imagine some sneaky groups from China are using a secret trick to break into computers that use Microsoft's SharePoint.
This trick uses a problem in the software to get in.
These groups have already gotten into computers of the US government and other big companies around the world.
Microsoft knows about it and is trying to fix the problem with help from the US government and other security helpers.
They are warning everyone to update their software so the sneaky groups can't get in.
Three China-linked cyber espionage groups are behind a major hacking campaign.
The campaign exploits vulnerabilities in Microsoft's SharePoint server software.
Multiple US government agencies and global organizations have been affected.
Microsoft is working with US agencies and international partners to mitigate the threat.
This is the latest in a series of cyber incidents involving Microsoft and suspected Chinese hackers.
- Who
- China-linked cyber espionage groups: Violet Typhoon, Linen Typhoon, and Storm-2603.
- What
- A major hacking campaign exploiting vulnerabilities in Microsoft SharePoint.
- When
- The breach was detected over the weekend.
- Where
- Globally, impacting various organizations.
- Why
- To compromise systems and potentially steal data.
- Affected Software
- Microsoft SharePoint (customer-managed, on-premises versions)
- Involved Parties
- Violet Typhoon, Linen Typhoon, Storm-2603, Microsoft, CISA
- Target
- US government agencies, global organizations
- Vulnerability Type
- Exploitation of critical flaws