Tuesday, 22 July, 2025
Google Attributes Major SharePoint Hacks to China-Affiliated Actors; Urgent Patching Advised
Google’s Mandiant has confirmed a “China‑nexus threat actor” is behind part of a global cyber espionage campaign exploiting zero‑day vulnerabilities in on-premises SharePoint servers—affecting approximately 100 organizations, including U.S. and European government agencies. Microsoft's initial patch failed to fully mitigate the threat, enabling attackers to extract cryptographic keys and install backdoors. Microsoft has since released comprehensive fixes and urges immediate patching.
Read full story at Economic Times