Microsoft knew of SharePoint security flaw but failed to effectively patch it
REUTERS.COM
'critical flaw'
SUMMARY

A recent Microsoft security patch did not fully resolve a critical flaw in its SharePoint server software, which has led to a potential cyber espionage effort. Approximately 100 organizations were targeted over a weekend, with two Chinese hacking groups, "Linen Typhoon" and "Violet Typhoon," exploiting these vulnerabilities. Microsoft confirmed that additional patches have been released since the issue was first identified at a hacker competition in May.

The attack affected various agencies, including the U.S. National Nuclear Security Administration, though no sensitive information has reportedly been compromised. China's embassy denied involvement, stating it opposes cyberattacks.

Advertisement
Scroll to continue reading
▶︎ Click here for more breaking news