Microsoft Issues Emergency Fix for Active SharePoint Zero-Day Exploit
UNITED STATES, JUL 23 – Hackers exploit a severe zero-day flaw in Microsoft SharePoint servers to steal encryption keys and data, affecting over 10,000 companies including government and energy sectors.
- On July 22, 2025, Microsoft disclosed active cyber espionage exploiting a zero-day vulnerability in its on-premises SharePoint software worldwide.
- The attacks stemmed from multiple China-linked hacking groups, including Silk Typhoon tied to China’s Ministry of State Security.
- Researchers found over 100 compromised organizations, mostly in the US and Germany, including government agencies and major firms.
- Microsoft urged customers to install security patches, change digital keys, and hunt for breaches, while the FBI confirmed ongoing investigation and cooperation with partners.
- The event suggests a growing, sophisticated threat landscape targeting enterprise software, requiring comprehensive defenses beyond patching to prevent long-term access.
210 Articles
210 Articles


Microsoft server hack has compromised 400 organizations, researchers say
Tally of Microsoft victims surges to 400 as hackers capitalize on SharePoint flaw
The number of companies and organizations compromised by a security vulnerability in Microsoft Corp.’s SharePoint servers is increasing rapidly, with the tally of victims soaring more than six-fold in a few days, according to one research firm.
They increase the victims of the large-scale hacker attack by exploiting a vulnerability of SharePoint, to the web platform for collaboration, content management and the creation of Microsoft's corporate websites. The US group has attributed the action also to Chinese actors. Accused that it outraged Beijing. According to estimates of the Dutch security company Eye Security, hackers have violated the data of about 400 government agencies, compan…
Coverage Details
Bias Distribution
- 52% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium