US Edition
US nuclear weapons agency breached in Microsoft SharePoint hack, Bloomberg News reports
UNITED STATES, JUL 23 – Chinese state-sponsored hackers exploited zero-day SharePoint flaws to breach over 400 organizations worldwide, including the U.S. nuclear security agency, with limited system impact reported, officials said.
- On July 18, 2025, threat actors exploited a zero-day Microsoft SharePoint vulnerability to breach the U.S. Department of Energy's National Nuclear Security Administration network.
- The exploitation followed discovery of CVE-2025-53770, a remotely executable bug in self-hosted SharePoint servers, which Chinese state-backed groups Linen Typhoon and Violet Typhoon targeted starting around July 7.
- Dutch cybersecurity firm Eye Security detected the attacks early, reporting over 400 compromised servers affecting at least 148 global organizations including governments, corporations, and agencies beyond NNSA.
- Eye Security CTO Piet Kerkhofs noted that most victims were "already compromised for some time already," while chief hacker Vaisha Bernard said the true number is likely higher due to stealthy attack methods.
- Microsoft and Google issued emergency patches and warned companies to immediately secure SharePoint servers by following recommended mitigations to limit further infiltration and data theft.
115 Articles
115 Articles
The U.S. company has detected previously unknown security flaws within this massively used file-sharing service around the world. At least three actors operating in China have taken advantage of it to carry out attacks.
Microsoft confirms Chinese cyber groups behind major SharePoint exploit; US agencies and global companies among affected
Three China-linked cyber espionage groups have launched a significant hacking campaign affecting various organisations, including US government agencies. The attack exploits vulnerabilities in Microsoft SharePoint, prompting investigations by federal officials and cybersecurity experts.
US nuclear weapons program hacked by foreign agents
Foreign agents were able to penetrate the systems of the U.S. agency responsible for maintaining and designing nuclear weapons.The National Nuclear Security Administration, which operates under the United States Department of Energy, was compromised along with other sectors of the department. According to Bloomberg, while the NNSA is semiautonomous, it still holds the responsibility of producing and dismantling nuclear arms in the United States.…
Coverage Details
Bias Distribution
- 36% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
