US Edition
US nuclear weapons agency breached in Microsoft SharePoint hack, Bloomberg News reports
UNITED STATES, JUL 23 – Chinese state-sponsored hackers exploited a zero-day SharePoint vulnerability to breach over 50 organizations including the nuclear agency, with no classified data compromised, officials said.
- Unidentified attackers leveraged an unpatched security flaw in Microsoft’s SharePoint software to compromise more than 400 organizations, including the U.S. National Nuclear Security Administration, by mid-July 2025.
- The exploitation followed Microsoft’s delayed patch for CVE-2025-53770, enabling Chinese state-backed groups Linen Typhoon, Violet Typhoon, and Storm-2603 to conduct widespread attacks.
- Dutch cybersecurity company Eye Security initially uncovered the breaches on July 18, revealing attacks that impacted sectors such as government, telecommunications, and technology globally, with the true number of affected organizations likely being higher than reported.
- Microsoft and Google released emergency patches, warned companies of increased compromises, and the Chinese government denied involvement in the attacks.
- The breaches prompted urgent patch implementations and system restorations, with no sensitive data believed compromised, though experts caution the total number of affected entities may still rise.
90 Articles
90 Articles
Chinese hackers breach US nuclear security agency in cyberattack operation, officials say
A sweeping cyberattack breached the U.S. National Nuclear Security Administration (NNSA) through Microsoft’s Sharepoint document software, the Energy Department confirmed to Fox News Digital on Wednesday. The agency does not know of any sensitive or classified information that has been stolen at this time. "On Friday, July 18th, the exploitation of a Microsoft SharePoint zero-day vulnerability began affecting the Department of Energy, including …
Microsoft SharePoint Hacking Has Hit More Than 400 Victims, Researchers Warn
A major hacking campaign against Microsoft’s SharePoint server software has attacked more than 400 victims, according to researchers at Netherlands-based Eye Security. In an update issued on July 23, Eye Security said that “before this vulnerability was widely known last Friday, our team scanned over 23,000 SharePoint servers worldwide” and in all, the company found more than 400 systems that were “actively compromised during four confirmed wave…
China-linked hackers hit US nuclear and health agencies
Hackers exploited flaws in Microsoft SharePoint software to compromise servers at the National Institutes of Health (NIH) and the National Nuclear Security Administration (NNSA), officials confirmed. The breach was part of a broader global campaign that targeted on-premise SharePoint systems, affecting at least 60 organizations across multiple sectors and countries. An internal email obtained by The Washington Post reveals that attackers comprom…
Microsoft transmits that Chinese “badgers”, including state sponsors, have exploited security vulnerabilities in its servers that have document sharing programs - SharePoint, analysing that hundreds of government agencies and organizations have been compromised, notes The Guardian.
Coverage Details
Bias Distribution
- 36% of the sources are Center, 36% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
