Microsoft Probes Possible Breach of Its Cyber Threat Notification System After Suspected Chinese Hack: Report - Microsoft (NASDAQ:MSFT)
UNITED STATES, JUL 26 – More than 400 organizations were compromised in a cyber espionage campaign possibly enabled by a leak from Microsoft's early alert system, affecting global SharePoint users.
- Microsoft observed exploit attempts targeting critical vulnerabilities in its SharePoint software starting on July 7, 2025, leading to a major investigation.
- The exploits followed a security patch release on July 8 that failed to fully fix the flaws, raising concerns about a possible leak from Microsoft’s early alert system for cybersecurity partners.
- At least three China-affiliated hacking groups, including Linen Typhoon and Violet Typhoon, exploited these flaws to compromise over 400 global organizations, including the US National Nuclear Security Administration.
- Dustin Childs from Trend Micro’s Zero Day Initiative said, "A leak happened here somewhere," suggesting a breach within Microsoft’s MAPP program, which provides early vulnerability information to trusted vendors.
- Microsoft pledged to review the incident, apply broad security improvements, and continues to investigate the leak’s impact, highlighting ongoing challenges in securing centralized vulnerability management.
12 Articles
12 Articles
Microsoft Hack Hits Hundreds of Firms, Agencies as Damage Spreads | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting
(Bloomberg) — Microsoft Corp. said a Chinese hacking group is exploiting security vulnerabilities in the company’s SharePoint servers to deploy ransomware, following a cyberattack discovered last week that has affected hundreds of entities around the world. Most Read from Bloomberg The group, which Microsoft has named Storm-2603, has a history of waging ransomware attacks, which […] Thank you for subscribing to our RSS feed! The post Microsoft H…
The SharePoint hacks increase pressure on Microsoft's Secure Future Initiative, which the company calls an ambitious effort expected to take years to complete
Andrew Martin / Bloomberg: The SharePoint hacks increase pressure on Microsoft's Secure Future Initiative, which the company calls an ambitious effort expected to take years to complete — Three months ago, Microsoft Corp. issued a progress report on what it described as the largest cybersecurity engineering project in history.
Microsoft Investigates Leak in Early Warning System Used by Chinese Hackers to Exploit SharePoint Vulnerabilities
Chinese laws requiring vulnerability disclosure to the government create transparency issues and potential conflicts for international cybersecurity efforts. Microsoft is probing whether a leak from its confidential early warning system enabled Chinese state-sponsored hackers to exploit significant flaws in its SharePoint software, leading to breaches at over 400 organizations, including the U.S. agency responsible for […] The post Microsoft Inv…
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium