Story perspectives

Chinese Hackers Exploit SharePoint, Targeting Global Governments

7/28/2025

27 3

Summary

Story summary

Chinese state-affiliated hackers exploited Microsoft SharePoint vulnerabilities, impacting global governments and businesses.
Three groups—Linen Typhoon, Violet Typhoon, and Storm-2603—have targeted on-premises SharePoint versions since July.
Victims include U.S. government agencies, though no classified data was compromised.
Attackers bypassed Microsoft’s patches, gaining credentials for sustained access.
Microsoft advises users to apply updates and consider migrating to the cloud for enhanced security.

1 of 1

Story summary

Chinese state-affiliated hackers exploited Microsoft SharePoint vulnerabilities, impacting global governments and businesses.
Three groups—Linen Typhoon, Violet Typhoon, and Storm-2603—have targeted on-premises SharePoint versions since July.
Victims include U.S. government agencies, though no classified data was compromised.
Attackers bypassed Microsoft’s patches, gaining credentials for sustained access.
Microsoft advises users to apply updates and consider migrating to the cloud for enhanced security.