Chinese Hackers Exploit Microsoft SharePoint Vulnerability in Global Cyberattack
TL;DR
Microsoft has issued security updates for on-premises SharePoint servers to address active exploits by Chinese state-sponsored threat actors targeting vulnerabilities CVE-2025-49706 and CVE-2025-49704, which are being used to deploy web shells and steal machine keys. Organizations are urged to apply updates, enable AMSI and Defender Antivirus, rotate server keys, and monitor for indicators of compromise to prevent exploitation.
Topics:top-newssecurity#cve-2025-49704#cve-2025-49706#security#sharepoint-vulnerabilities#threat-actors#web-shell
- Disrupting active exploitation of on-premises SharePoint vulnerabilities Microsoft
- China behind vast global hack involving multiple US agencies Politico
- Microsoft says Chinese hacking groups exploited SharePoint vulnerability in attacks CNBC
- Microsoft flaw ‘opens the door’ for hackers. It will be hard to close The Seattle Times
- US Nuclear Weapons Agency Breached in Microsoft SharePoint Hack Bloomberg
Want the full story? Read the original reporting
Read on Microsoft