Tech

Microsoft investigates potential breach in its security program affecting 400+ networks

Editorial Team
Editorial Team

Microsoft is investigating a potential breach in its confidential security program that may have left over 400 networks vulnerable to cyberattacks by Chinese hackers.

Why it matters: The incident has affected numerous organizations, including crucial U.S. government agencies like the National Nuclear Security Administration, and could significantly damage partner trust in Microsoft’s security protocols.

The details:

  • The focus of the investigation is the Microsoft Active Protections Program (MAPP), which shares early information on vulnerabilities with select cybersecurity vendors under strict non-disclosure agreements.
  • Vulnerabilities were first disclosed in May 2025 at a cybersecurity conference, and Microsoft alerted its MAPP partners between late June and early July.
  • On July 7, just one day before Microsoft issued public patches, hackers began exploiting the vulnerabilities, leading to suspicions of a leak from within the MAPP network.
  • The flaws in SharePoint allowed attackers to bypass login checks, execute malicious code remotely, steal cryptographic keys, extract sensitive data, and remain hidden even after system restarts.

Microsoft has linked the attacks to three China-affiliated groups: Linen Typhoon, Violet Typhoon, and Storm-2603.

What they’re saying:

  • Cybersecurity experts cite the timing of the attacks as a critical factor, making it unlikely that the breach occurred by coincidence.
  • Microsoft maintains that MAPP is a vital component of its security protocol, though any confirmed breach would significantly damage partner trust.
  • Cybersecurity agencies in the U.S. and Europe have issued alerts urging organizations to patch SharePoint systems and monitor for signs of compromise.

The other side: Despite the potential breach, Microsoft’s stock has remained stable in recent sessions, but investors are expected to closely monitor any potential fallout in future earnings or government contract reviews.

What’s next: As Microsoft continues to grow in the cloud and defense sectors, its handling of this incident will be crucial for future risk assessments. The company has committed to reviewing the incident and reinforcing the program’s security measures.

Recent from X

Samsung Galaxy Z Fold 7 sees record demand, sells out in major markets
Inversion debuts Arc spacecraft for rapid global cargo delivery
Scientists uncover evidence of vast ocean hidden deep beneath Earth’s surface
First-ever video captures earthquake fault rupture in Myanmar
Moon phase today: Waxing crescent with 5% illumination on August 25, 2025
Previous Article Huawei AI Huawei launches new AI system at Shanghai conference, filling Nvidia’s absence
Next Article Pixel Lineup Google leaks entire Pixel 10 lineup through Play Store ahead of launch

In the last week: