Archive · 23 Jul 2025
Chinese Hackers Exploit Microsoft Flaws, Hitting US Nuclear Agency
Imagine your computer has a special door (SharePoint) that lets you share files.
Some sneaky people (hackers from China) found a way to sneak in through the door.
They got into computers of important places like the US nuclear weapon designers and schools.
They stole secret codes, like passwords.
Even after the computer company, Microsoft, fixed the door, the hackers found a new way to break in.
The company says they are working hard to stop them.
Chinese state-sponsored hackers exploited vulnerabilities in Microsoft SharePoint software.
US National Nuclear Security Administration and the US Education Department were among the breached.
Hackers targeted various organizations including government agencies and private companies globally.
Microsoft has patched the software, but hackers found ways to bypass the fixes.
The Chinese government denies any involvement in the cyberattacks.
- Who
- Chinese state-sponsored hackers, including groups named Linen Typhoon, Violet Typhoon, and Storm-2603, exploited the vulnerabilities. Victims include the US National Nuclear Security Administration, the US Department of Education, and various private companies.
- What
- Chinese hackers exploited vulnerabilities in Microsoft SharePoint software to breach various organizations globally.
- When
- The breaches have been ongoing since at least July 7, with the Energy Department affected on July 18.
- Where
- Breaches occurred globally, including in the US, Europe, and the Middle East. Victims include entities in the US, Canada, Brazil, and other countries.
- Why
- The hackers aimed to steal sign-in credentials and potentially access sensitive information, leveraging SharePoint's deep integration with Microsoft's platform.
Microsoft & US Government
China
Attribution of Responsibility
Microsoft & US Government
Microsoft identified Chinese state-sponsored hackers as responsible for the breaches. US agencies, including the NNSA, were affected.
China
The Chinese government denies responsibility for the cyberattacks and accuses the US of unfounded speculation.
- Software
- Microsoft SharePoint
- Affected Organizations
- US National Nuclear Security Administration, US Dept. of Education, others
- Hacker Groups
- Linen Typhoon, Violet Typhoon, Storm-2603
- Impact
- Stolen sign-in credentials, potential access to sensitive information
- Microsoft Response
- Patches released, ongoing investigations
- Chinese Embassy Response
- Denies involvement, opposes cyberattacks